Pricing | Datadog

Infrastructure

See inside any stack, any app, at any scale, anywhere

Free

^$ 0

Core collection and visualization features

See all features See less features

Features

Standard Events and Metrics
Out-of-the-Box Dashboards
500+ Integrations
Host and Container Maps
Enterprise-Grade Security
Unlimited User Accounts
Full-Resolution Data Retention

Pro

^$ 15

Per host, per month*

Centralize your monitoring of systems, services, and serverless functions

See all features See less features

Features

Standard Events and Metrics
Out-of-the-Box Dashboards
500+ Integrations
Host and Container Maps
Enterprise-Grade Security
Unlimited User Accounts
Full-Resolution Data Retention
Alerts
Container Monitoring
Custom Metrics
Custom Events
Single Sign-On with SAML
Outlier Detection

Add-ons

AWS Fargate (serverless containers)
IoT Device Monitoring

*Billed annually or $18 on-demand

Enterprise

^$ 23

Per host, per month*

Advanced features and administrative controls

See all features See less features

Features

Standard Events and Metrics
Out-of-the-Box Dashboards
500+ Integrations
Host and Container Maps
Enterprise-Grade Security
Unlimited User Accounts
Full-Resolution Data Retention
Alerts
Container Monitoring
Custom Metrics
Custom Events
Single Sign-On with SAML
Outlier Detection
Watchdog: Automated insights
Correlations
Anomaly Detection
Forecast Monitoring
Live Processes
Advanced Administrative Tools

Add-ons

AWS Fargate (serverless containers)
IoT Device Monitoring

*Billed annually or $27 on-demand 100 host minimum

Volume discounts available (500+ hosts/mo)

Free

^$ 0

Core collection and visualization features

1-day metric retention
Up to 5 hosts

Pro

^$ 15

Per host, per month*

Centralize your monitoring of systems, services, and serverless functions

500+ integrations
Out-of-the-box dashboards
15-month metric retention

*Billed annually or $18 on-demand

Enterprise

^$ 23

Per host, per month*

Advanced features and administrative controls

Machine learning-based alerts
Live Processes

*Billed annually or $27 on-demand 100 host minimum

Volume discounts available (500+ hosts/mo)

Features

Free

Pro

Enterprise

Standard Events and Metrics

Up to 5 hosts

Out-of-the-Box Dashboards

500+ Integrations

Host and Container Maps

Enterprise-Grade Security

Unlimited User Accounts

Full-Resolution Data Retention

1 day

15 months

15 months. Customizable.

Alerts

Unlimited

Container Monitoring

10 per host included

20 per host included. Customizable.

Custom Metrics

100 per host included

200 per host included. Customizable.

Custom Events

500 per host included

1000 per host included

Single Sign-On with SAML

Outlier Detection

Watchdog: Automated insights

Correlations

Anomaly Detection

Forecast Monitoring

Live Processes

Advanced Administrative Tools

Add-ons

AWS Fargate (serverless containers)

$1 per task

IoT Device Monitoring

$5 per device

Pricing

^$ 0

^$ 15

Per host, per month*

^$ 23

Per host, per month*

Support Plans

From basic plans to bespoke offerings, Datadog offers the right level of support for any organization.

LEARN MORE ABOUT OUR SUPPORT PLANS

Common Questions

How do you define a host?

How do I monitor containers?

The Datadog Agent runs in a container alongside any number of other containers on a host. From there it can collect metrics from its neighboring containers and from the host itself. Depending on your plan, you can monitor 10 or 20 containers free for each host license.Additional containers will be billed at $0.002 per container per hour. In addition, you can purchase prepaid containers at $1 per container per month.

What is a custom metric?

Datadog was designed to allow you to monitor your own custom applications and business metrics—not just your infrastructure. You can send any and all of your organization’s important metrics to Datadog for graphing, alerting, correlation, anomaly detection and more. Example uses: monitoring ad revenue, the rate at which shopping carts are abandoned, or the health of an in-game economy. Many customers find these metrics invaluable, especially when combined with infrastructure metrics.

What is a custom event?

Datadog allows you to send custom events coming from your own custom applications such as custom-built deployment tools or scheduled maintenance jobs. This way, you can correlate any of these events with performance metrics, create monitors for alerting and enrich events at intake with processing pipelines to be queried alongside other standard events.

How many events are included per host?

Datadog offers 500 custom events for every host monitored with infrastructure monitoring for pro plan, or 1000 for enterprise plan. Custom events are averaged across your entire account, not just on a per-host basis. Beyond this limit, Datadog charges $2 for 100 000 custom events (billed annually or $3 on-demand), although it is rare for our customers to exceed the included volume.

How can I send custom metrics and events?

You can send Datadog custom metrics and events in three ways

The Datadog Agent ships with DogStatsD so you can submit custom metrics via the Agent's non-blocking API functions for many programming languages.
The Datadog Agent allows for the creation of custom integrations via plugins to the Agent. This plugin system allows the Agent to collect custom metrics on your behalf. Integrations which are contributed back to the Datadog Agent convert to standard metrics.
Datadog also has a full-featured API that you can send your metrics to—either directly over HTTP or with a language-specific library.

How can I be sure my data is secure?

Security is our top priority. This includes, universal HTTPS, strong TLS configuration, and HTTP Strict Transport Security. Our Agent is open-source, which means it can be reviewed to ensure it meets your security requirements.

Are there other billing options?

Annual, monthly and hourly plans are available. We can customize billing plans to meet your needs. For a detailed explanation of billing, please see our Billing FAQ

Do you have special offerings for partners?

We’re always looking to partner with technology and service providers and resellers. See our Partners page for more.

How do you define an IoT device?

An IoT device is a nonstandard compute device deployed outside of an on-premise or cloud data center which transmits data over a network. Examples of IoT devices include the Raspberry Pi and Nvidia Jetson. You can monitor IoT devices in Datadog with the Datadog IoT Agent.

Log Management

Analyze and explore log data in context with flexible retention

Ingest

Starting At

^$ 0.10

Per ingested or scanned GB, per month*

Ingest, process, live tail, and archive all logs

Enrich and structure log data
Parse on ingestion
Generate log-based metrics
Self-hosted archives, with the option to rehydrate
Dynamic index routing

*Per GB of uncompressed data ingested for processing, or compressed data scanned for rehydrating.

Retain or Rehydrate

^$ 1.70

Per million log events per month*

Retain logs based on their value and rehydrate from archives on-demand

Define log retention based on tags or facets
Simplified pricing based on retention for better cost control
Log patterns and analytics
Log Rehydration™ for audits and historical analysis

*Billed annually or $2.55 on-demand

Volume discounts available (1.2BN+ events/mo).

Unlimited Sources
Faceted & Full-text Search
100+ Integrations
Custom Processing & Parsers
Log Analytics and Dashboarding
Enterprise-Grade Security

Unlimited User Accounts
Real-time Alerting
Logging without Limits™
Log-based custom metrics
Archive to AWS S3, Azure Blob Storage,
and Google Cloud Storage
Log Rehydration™ from AWS S3, Azure Blob Storage, and Google Cloud Storage

When Combined with Other Plans

Automated Infrastructure Tags
Pivot seamlessly to Infrastructure and APM

Service and Support

Technical support across chat and email
Community Forum and Online Docs
Plans with the right level of support for your organization

Common Questions

How do you define retention?

The retention period is the number of days your logs are searchable and analyzable. After this period, logs disappear from your index(es).

Logs removed from your index(es) do not have to be gone forever! Check out our Log Archives for long-term storage options.

What happens if I send an unexpectedly high volume of logs?

By committing to a monthly volume of logs, you aren’t rate-limited based on a single day's volume. Send as much as you need on any given day without losing visibility. Assuming your average is lower on other days, your bill is unaffected.

In those cases where you have a big month, not to worry! You maintain complete visibility and pay for additional services (+50% of the annual price) only on the volume that exceeds your commitment.

How is Rehydration billed?

When you rehydrate logs, Datadog scans the compressed logs in your archive for the time period you requested, and then indexes only log events that match your rehydration query. Datadog charges $0.10 per compressed GB of log data that is scanned. For any log events indexed from a rehydration, the cost is equal to your contracted indexing rates for the retention period selected for the rehydration.

I know my consumption in GB/day: how do I convert it into millions of log events?

Log events come in all shapes and sizes, which is precisely why we offer event-based pricing! We want to encourage rich logs to provide the most value.

The best way to get the number of log events during your Datadog trial is to run a count query over the last 24 hours and multiply by 30 days to estimate for the month. This can, of course, also be done in your current log management solution, if you have one.

How do I monitor containers?

The Datadog Agent runs in a container alongside any number of other containers on a host. From there it can collect metrics and logs from its neighboring containers and from the host itself.

How are log-based metrics billed?

Log-based metrics can either be counted towards your Custom Metrics allocation as outlined in your infrastructure plan or charged on-demand starting at $5/100 metrics.

How can I be sure my data is secure?

Security is our top priority. This includes, TCP/SSL Strict Transport Security, agent-level scrubbing and SOC 2 compliance. Our Agent is open-source, which means it can be reviewed to ensure it meets your security requirements.

Are there other billing options?

Annual and monthly plans are available. We can customize billing plans to meet your needs. For a detailed explanation of billing, please see our Billing FAQ.

How can I manage my highly dynamic log volume in a cost-effective way without losing visibility?

We’ve designed our Log Management offer knowing from day 1 that managing large and fluctuating log volumes is a common problem. We have various innovative solutions for this, which you can learn more about from our dedicated article here.

Having all your infrastructure, APM, and log data under one roof is something we definitely encourage, but you can also subscribe only to Datadog’s Log Management. Learn how to configure only log collection here.

What retentions are available for on-demand customers?

For on-demand customers, the default retention is 15 days. If you have already created a Datadog account and would like to use a different retention, you can request a different retention at support@datadoghq.com

Am I billed for ingestion even if I index all of my logs?

The $0.10 per GB for ingesting and processing logs is waived if you index 100% of the logs you send to Datadog. The $0.10 per GB rate always applies to any compressed log data scanned during rehydration.

APM & Continuous Profiler

End-to-end distributed tracing
and always-on production code profiling

APM

Starting At

^$ 31

Per host, per month*

Monitor every service, every code deployment, and every request

Correlate traces with metrics, logs, processes, network data, and more
15-minute live search & analytics
15-day historical search & analytics
15-month metric retention

*Billed annually or $36 on-demand

APM & Continuous Profiler

Starting At

^$ 40

Per host, per month*

Optimize code performance in production with minimal overhead

Everything included in APM
Code level visibility for every request
Optimize bottlenecks in your code to reduce resource consumption and cloud costs
Actionable insights with automatic code analysis

*Billed annually or $48 on-demand

Features

APM

APM & Continuous Profiler

Features

End-to-end distributed tracing for any app at any scale

Service dependency visualizations

Deployment Tracking - performance metrics and version comparisons for every deploy

Service Catalog - service ownership management alongside real-time observability data

Search and analyze 100% of ingested traces using any tag, live for 15 minutes

Tag-based Retention Filters for full control over Indexed Spans

Generate metrics from all Ingested Spans

Tag any trace with any metadata

Trace Outliers for fast root cause detection

Low overhead code profiling in production

Code hotspots for every request

Resource consumption breakdown for every host, service, request, and code version

Detect code performance regressions after code deploys

Correlate infrastructure metrics with code profiles

Various profiling types for deeper insights (e.g. CPU, memory, lock, wall time, and I/O)

Automatic code analysis and actionable insights

Included

Span Ingestion: 150GB per APM host, averaged across all your APM hosts; then $0.10/GB

Span Retention: 1 million Indexed Spans per APM host, averaged across all your APM hosts; then $1.70 per 1 million Indexed Spans with 15-day retention. See Common Questions below for additional retention periods

4 containers per profiled host, averaged across all your profiled hosts; then $2 per container

Add-ons

AWS Fargate

$2 per task

$2.60 per task

When combined with other products

Full stack visibility

Pivot to related infrastructure metrics, logs, processes, network data, synthetic tests, and RUM sessions

Cross-product dashboards and alerts

Service and Support

Technical support across chat and email
Community Forum and Online Docs
Plans with the right level of support for your organization

Pricing

^$ 31

Per host, per month*

^$ 40

Per host, per month*

Continuous Profiler is also available standalone starting at $19 per host.
For more details, or reach out to your Sales or Customer Success rep.

What kind of billing plan do I need to run APM?

APM standalone or APM & Continuous Profiler can be purchased in addition to either Pro or Enterprise Infrastructure Monitoring plans.

What counts as a billable APM host?

A billable APM host is a host on which APM is enabled and that is actively submitting spans to the Datadog SaaS application. This means that hosts running third party services (e.g. databases, caches, queues and load-balancers) do not count towards APM billing even if APM was enabled on them. Their price is included with the host price of their calling applications that do submit spans to the Datadog platform.

I am an existing APM customer. Can I switch to the APM & Continuous Profiler plan?

Yes. Existing APM customers have the option of changing their plan to APM & Continuous Profiler at $40 per host per month. Contact your Sales or Customer Success rep for help.

Can I purchase the APM & Continuous Profiler plan for a portion of my hosts and individual standalone products for the rest of my hosts?

No. Customers can commit to only one of the plans across all their APM hosts, not a combination thereof.

What languages does APM support?

Java, Python, Ruby, Go, Node, .NET and PHP. You can find the full list of supported languages and libraries in our documentation.

Can I add custom instrumentation on top of Datadog’s out-of-the-box instrumentation?

Yes. We provide auto-instrumentation for popular libraries and frameworks, but you can easily add custom instrumentation if desired.

Can I run APM with containers?

Yes, you can run APM in a containerized environment. The number of containers running on each host (node) does not impact the APM host-based price. AWS Fargate is also supported.

Does APM support Serverless computing?

Yes, we support AWS Fargate tasks ($2 per task) and AWS Lambda (see pricing info here).

What is the difference between ingestion and retention?

Ingestion means sending your traces to Datadog and having all of them available for Live Search and Analytics for 15 minutes. Retention means storing your most important traces (e.g. error, high latency, or business-critical ones) and making them available for search and analysis during a retention period of your choice (15 days by default).

Can I ingest additional spans?

Yes. While we include 150GB per APM host by default for Ingested Spans, you can always ingest additional traces and spans for 15-minute live search and analytics at $0.10/GB.

Note: The included 150GB per host is summed over all the APM hosts. For example, if in a given month you have 2 APM hosts and one ingests 250GBs and the other 50GBs (300GB in total), you will not be billed for ingestion that month.

Can I retain (index) additional spans and modify the retention period?

Yes. While we include 1 million Indexed Spans per APM host with 15-day retention by default, you can always retain additional spans.

For additional Indexed Spans, we offer the following retention periods:

7-day retention at $1.27 per million spans per month (billed annually or $1.91 on-demand)
15-day retention at $1.70 per million spans per month (billed annually or $2.55 on-demand)
30-day retention at $2.50 per million spans per month (billed annually or or $3.75 on-demand)

If you need longer retention, please reach out to your Customer Success or Sales rep to customize your plan.

Note 1: The included 1 million Indexed Spans per host is summed across all your APM hosts. For example, if in a given month you have 2 APM hosts and you index 1.5 million spans from one and 0.5 million from the other (2 million in total), you will not be billed for indexing that month.

Note 2: Indexed Spans that are auto-retained by Datadog do not count towards the 1 million Indexed Spans that are included per host.

How does on-demand billing of ingested and indexed spans differ from my committed plan?

For on-demand use of APM, which is counted on an hourly basis, both ingested and indexed span allotment for the associated APM Hosts are only counted toward use in that same hour and are not aggregated across all use throughout the month, as they are under the committed plan. This means that ingested and indexed span use that goes over the associated APM Host allotment in the same hour will increase billing regardless of span use during other times.

What are the hourly span allotments and on-demand pricing?

For every host hour customers get an allotment of 205 MB for ingested spans and 1,370 indexed spans. These numbers are a result of dividing the allotments under committed plans by the number of hours in a month. For every additional 205 MB in a given host hour, customers will be charged $0.0205, and for every additional 1,370 indexed spans in a given host hour, customers will be charged $0.0023.

Do I have to ingest and/or retain 100% of my traces?

With an intuitive user interface, you can decide what to send to Datadog as well as which traces to retain and for how long. This way, customers get full control over their tracing data and their network-bandwidth-related costs.

How are span-based metrics billed?

Span-based metrics are counted towards your Custom Metrics allocation as outlined in your infrastructure plan.

Can I run APM on web apps with Azure App Services (PaaS)?

Yes, the Datadog extension for Azure App Services provides additional monitoring capabilities for Azure Web Apps, including full support for distributed tracing using automatic instrumentation, manual APM instrumentation to customize spans, Trace_ID injection into application logs, and submitting custom metrics using DogStatsD. Learn more with our documentation.

What is considered as a host for Azure App Services?

All Azure App Service Plan instances will count as Infrastructure hosts. In addition, if they are running the Datadog extension and submitting APM traces from a Web App, all instances in the underlying ASP will be counted as APM hosts.

Are there other billing options?

Annual, monthly and hourly plans are available. We can customize billing plans to meet your needs. For a detailed explanation of billing, please see our Billing FAQ.

What is Continuous Profiler?

Continuous Profiler is a tool to observe and analyze code-level performance in your production environment at all times with minimal overhead. It allows developers to identify and optimize the most resource-consuming methods in their code. We provide comprehensive documentation and encourage you to take a read.

How is Continuous Profiler billed?

Continuous Profiler is billed per host, per month, regardless of whether it is combined with APM. The price includes 4 containers running profiled applications per host. Additional containers will cost only $2 each. Annual, month-to-month, and on-demand billing plans are available. For a detailed explanation of billing, please see our Billing FAQ.

Note: The included 4 containers per host is summed across all your profiled hosts. For example, if in a given month you have 2 profiled hosts, and one of them has 6 profiled containers and the other has 2 profiled containers (8 in total), then you will not be billed for profiled containers that month.

I am an existing Continuous Profiler customer. Can I switch to the APM & Continuous Profiler plan?

Yes. Existing Continuous Profiler customers have the option of changing their plan to APM & Continuous Profiler at $40 per host per month. Contact your Sales or Customer Success rep for help.

I am an existing Continuous Profiler customer and I am not interested in the APM & Continuous Profiler plan. Will my cost per profiled host change?'

Existing Continuous Profiler Customers will be honored as per their current contracted price until renewal.

Can I purchase Continuous Profiler standalone?

Yes, Continuous Profiler can be purchased standalone at $19 per profiled host per month with an annual commitment. Month-to-month and on-demand plans are also available at $23 per profiled host per month or $0.038 per hour. or reach out to your Sales or Customer Success rep for more details.

Can I purchase the APM & Continuous Profiler bundle for a portion of my hosts and individual standalone products for the rest of my hosts?

No. Customers can commit to only one of the plans across all their APM hosts, not a combination thereof.

How do you define a profiled host?

A profiled host is a physical or virtual operating system instance which is running a profiled application. To be profiled, the host would need to have the agent installed and profiling enabled. When combined with APM, every APM host is also a profiler host, and vice versa. The same logic applies to profiled containers. For more information visit our Billing FAQ.

Which languages does Continuous Profiler support?

Currently supported languages are Java, Go, Python, and Ruby. Node is in beta and support for PHP, .NET, and C++ is coming soon.

How does Datadog Continuous Profiler work?

Our profilers constantly collect representative samples of all stack traces, aggregate them over a 60-second time period and forwards them through the Datadog agent. This is done continuously in one-minute intervals which means you will never lose code-level visibility in your services. To profile your services, simply import our profiling library or enable an environment variable flag when you run the APM tracer.

How do you ensure minimal performance impact in production?

We use the latest, most cutting-edge technologies, such as the JDK Flight Recorder, to ensure that performance impact is minimal even with full production workloads. Additionally, our profilers do not interrupt or interfere with any of your service requests hence we introduce no additional request latency.

How is profiling different from tracing?

Tracing measures latency of requests across services in distributed systems, whereas profiling provides deeper insights on all that happened on the code level of the services.

What are the benefits of Datadog Continuous Profiler?

Continuous Profiler is tightly integrated with the rest of the Datadog platform and it extends our seamless correlations between metrics, traces, and logs to the code level. This is extremely useful for code performance optimization, cost savings on cloud provider bills, and reducing request latency for improved user experience.

What types of profiles are available?

CPU, Memory Allocation, Lock, Wall Time, Disk IO, and Socket IO profiles. For more information visit our documentation page.

Are there other billing options?

Annual, monthly and hourly plans are available. We can customize billing plans to meet your needs. For a detailed explanation of billing, please see our Billing FAQ.

Database Monitoring

Surface slow performing queries and optimize application performance

Starting At

^$ 70

Per database host, per month*

Track normalized query performance trends using database-generated metrics
Correlate query performance with database infrastructure metrics
Access all of your database insights, database hosts, clusters, and applications
Extract valuable data without compromising database security

*Billed annually or $84 per host on-demand

In-depth explain plans
Out-of-the-box slow query detection
200 normalized queries supported per host
Automatic PII obfuscation from all query data
No code instrumentation needed
Unlimited user accounts

Tag-based query filtering and grouping
Access to hundreds of relevant database metrics
Total visibility into your Postgres, MySQL and SQL Server databases whether self-hosted or managed
Out-of-the-box database list with active connections and in-depth wait event analysis

When Combined with Other Plans

Set triggers to alert teams on abnormal query trends
Visualize and easily share insights with key stakeholders via Datadog Screenboards
Out of the box support for dashboards, monitors, SLOs and advanced formulas and functions

Service and Support

Technical support across chat and email
Community Forum and Online Docs
Plans with the right level of support for your organization

Common Questions

How do you define a database host?

A database host is any physical or virtual instance hosting your database on a server that you monitor with Datadog.

What databases are supported?

Database Monitoring (DBM) is vendor-agnostic. We support Postgres (9.6+), MySQL (5.6+) and SQL Server (2012, 2014, 2016, 2017, 2019) databases at this time, whether they be on-premise, self-managed, or cloud-hosted. In the future, we plan to support additional databases.

Can I purchase Database Monitoring (DBM) standalone?

No, you need to be an existing Infrastructure Monitoring customer to purchase Database Monitoring.

I am an existing Infrastructure Monitoring customer. Can I purchase DBM for a portion of my database hosts?

Yes, you can purchase Database Monitoring (DBM) for one, some, or all of your database hosts!

What are (query) explain plans and how are they useful?

A query explain plan or query execution plan describes the steps used to access data and enables you to locate hotspots. We automatically capture explain plans for all queries to make sure that you have sample available during critical moments.

How long is DBM data retained?

– Query metrics are retained for 3 months
– Explain plans and query samples are retained for 15 days

How does DBM work?

DBM uses the Datadog Agent to capture data from your databases. Please see our documentation for more information.

Does DBM require the use of an additional agent?

No, as long as you are an Infrastructure Monitoring customer and already have the standard Datadog Agent set up, you are able to use Database Monitoring. Check out our docs page for details.

What are normalized queries?

Identical queries with different parameters are grouped together by obfuscating the parameters. These query groups are called normalized queries and are sometimes referred to as query digests. Datadog supports 200 normalized queries per database host. Obfuscating parameters at the agent level also ensures that no sensitive data is forwarded.

Can I still use DBM if I have additional normalized queries past the included amount?

200 normalized queries are included per host. This allotment is aggregated across all hosts, meaning that if you have 2 hosts, you have a total limit of 200 + 200 = 400 queries regardless of the exact breakdown by host, i.e. 200 normalized queries on average. At your request, we can accommodate additional normalized queries surpassing this limit for an extra charge.

Are there other billing options?

Annual and monthly plans are available. We can customize billing plans to meet your needs. For a detailed explanation of billing, please see our Billing FAQ.

Synthetic Monitoring

API and Browser Tests for proactive, end-to-end visibility

API Tests

Starting At

^$ 5

Per ten thousand test runs, per month*

Proactively monitor site availability

Monitor uptime SLAs and SLOs
Globally managed locations
Sophisticated alerting capabilities

*Billed annually or $7.20 on-demand

Browser Tests

Starting At

^$ 12

Per thousand test runs, per month*

Easily monitor critical user journeys

Record tests without code
Intelligent, self-maintaining tests
View screenshots and front-end errors for every step

*Billed annually or $18 on-demand

Track site uptime and latency
Understand global performance
Track SLAs and SLOs
Customize frequency of test runs
Latency display of DNS, SSL, TTFB, and more.

Web-Recorder for code-free test creation
AI-driven Self-Maintaining Tests
Waterfall visualization and screenshots
Real-time alerting with rich context
Easy sorting and filtering with tags

When Combined with Other Plans

Full stack visibility
Pivot to related metrics, traces, and logs

Service and Support

Technical support across chat and email
Community Forum and Online Docs
Plans with the right level of support for your organization

Common Questions

What’s the difference between API Tests and Browser Tests?

API Tests monitor single endpoints or URLs, whereas Browser Tests monitor web business transactions or web user journeys that may involve several actions and pages. Multistep API tests are also available to chain several HTTP API tests together.

Are you able to alert on Synthetic monitors?

Yes, alerts are built in and triggered automatically when your tests fail. Datadog also integrates with your favorite collaboration/communication tools such as Slack, Pagerduty, ServiceNow, and more.

Can I view endpoint requests end-to-end?

Yes, with the out-of-the-box APM integration, you are able to tie back any synthetic tests to their corresponding back-end, code-level insights for minimal mean time to resolution.

Is there any extra charge for using private locations?

No. There are no additional costs to set up a private location. All test runs to a private location are billed just as they are to a managed location.

What counts as an API test run?

HTTP, SSL, DNS, TCP, and ICMP all fall under API test billing. Each hit being made on your endpoint counts as a single test run. If a test is set to run from 3 locations every minute, the test will count as 180 test runs in an hour.

For multistep API tests, each request counts as an individual API test.

What counts as a browser test run?

Each simulation of a full transaction (25 steps) counts as a single test run. A single test containing 50 steps counts as 2 test runs on each execution. So, running a 51 step test (counting as 3 test runs) every 15 minutes from 5 different locations and 2 different devices means the test will count as 120 test runs in an hour.

How do browser test subtests participate in Synthetics billing?

Subtests are treated just as any other step in the browser test. Therefore, we bill a subtest as part of the overall test execution. So if a user sets up a browser test with 3 subtests, that each have 5 steps nested, that would amount to a total of 15 steps.

Incident Management

Fully integrated incident management in-app

Starting At

^$ 20

Per user, per month*

Detect, triage, and track incidents with no context-switching
Assess severity and pull in relevant teams and resources
Collaborate directly in-app and across your favorite communication tools
Track incidents across an intuitive timeline and generate postmortems

*Billed annually or $30 on-demand

Declare, manage, and investigate incidents from multiple sources
Pivot from alert to chat room to timeline with no loss of context
Leverage a collaborative workflow with the Datadog Slack App
Integrations with paging and communication tools

Collect data and signals from across the platform
Set up webhooks from monitors and runbooks for autoremediation
Export to Datadog Notebooks and other documentation tools

When Combined with Other Plans

Automatic incident management across the platform
Preserved incident data from any source, start to finish

Service and Support

Technical support across chat and email
Community Forum and Online Docs
Plans with the right level of support for your organization

Common Questions

How is a user defined?

Incident Management is billed by counting Monthly Active Users (MAUs). An “active user” is only counted if they contribute comments or signals (graphs, links, etc.) to an incident. Anyone who only opens/closes an incident or simply views the incident are not counted. Additionally, these are not named seats, so you do not need to determine which specific users have access.

What tools does Datadog’s Incident Management integrate with?

Datadog integrates with the Datadog Slack App for incident communication channels to facilitate collaboration and timeline activity. Other communication tools can be linked directly from an incident. Check out our Docs for more information.

How do I declare an incident? Can I include external details?

Incident Management is deeply integrated across the Datadog platform to ensure you can open incidents when you need to from wherever you are. Incidents can be opened from alerts, graphs, logs, APM, Security signals and more. External sources, like customer support tickets, can also be used as signals in an incident by adding them as links. Doing so adds them to the incident timeline and can be used to explain the scope of impact.

Does Datadog have an on-call scheduler?

Datadog integrates with partners like PagerDuty to ensure your on-call team members can be added to incidents and appropriately notified.

Can I use Datadog Incident Management without using other Datadog products?

Datadog Incident Management can be used as a standalone incident management solution for your team, or as a central hub in-app to consolidate the tools and processes you already use.

Real User Monitoring & Session Replay

Measure the end-to-end experience of web and mobile applications from your users’ perspective

Mobile

Starting At

^$ 0.45

Per 1,000 sessions, per month*

Triage critical issues with Error Tracking and Crash Reporting for iOS and Android
Optimize mobile applications with performance metrics and proactive alerts
Correlate mobile user sessions to backend traces

*Billed annually, or $0.65 billed on-demand

Browser

Starting At

^$ 0.45

Per 1,000 sessions, per month*

Triage critical issues with Error Tracking
Optimize browser applications with performance metrics and proactive alerts
Correlate frontend user sessions to backend traces

*Billed annually, or $0.65 billed on-demand

Browser Premium

Starting At

^$ 1.80

Per 1,000 sessions, per month*

Everything in Browser, plus:

Session Replay: View user problems firsthand by watching video-like replays
Troubleshoot and debug faster with insights into user actions
Understand user behavior with funnel analysis and replays

*Billed annually, or $2.60 billed on-demand

Volume discounts available

Features

Mobile

Browser

Browser Premium

Features

Sessions

Views

Actions

Errors

Resources

Long Tasks

Visual Replay of User Sessions

Funnel Visualization

Frustration Signals

Performance Vitals

Mobile Vitals

Core Web Vitals

Out-of-the-box Dashboards

Error Tracking

Android, iOS

When combined with other products

Fullstack visibility with APM integration

Pivot to your application data

Support Plans

From basic plans to bespoke offerings, Datadog offers the right level of support for any organization.

LEARN MORE ABOUT OUR SUPPORT PLANS

Common Questions

How is a session defined?

A session is a user journey on your web application. It expires after 15 minutes of inactivity and lasts up to 4 hours. For a detailed explanation of user sessions, please see our docs.

What data does Datadog’s RUM collect?

We collect all the pages and screens visited by end users along with telemetry that matters: Browser, Android, iOS, React Native (data collected for both Android and iOS).

What is the difference between Browser Premium and Browser RUM?

Browser Premium provides all the benefits of Browser RUM, in addition to:

Viewing Replay (30-day retention), a pixel-perfect rendition of the web browsing experience of users
Tracking Resources (15-day retention) to see how long it takes for each external resource to load

How does Session Replay work?

Session Replay works by capturing the DOM and DOM-mutations to replay a user’s experience in real-time in the browser.

What Mobile languages do you support instrumentation for?

We currently support Android (Java and Kotlin), iOS (Swift and Objective-C), and React Native.

Can I view logs from my browser or mobile app in RUM?

Yes, these logs are automatically tied to the corresponding RUM session, making it easy to monitor when they happen during the user journey.

How can I begin setting up for RUM?

Setup steps can be found in our docs: Browser, Session Replay, Mobile.

CI Visibility

Monitor the health and performance of your CI pipelines and tests

Pipeline Visibility

Starting At

^$ 8

Per committer, per month*

Deep insight into pipelines, builds and jobs

View data from multiple CI providers in a single place
Visualize performance across pipelines, stages, and jobs
Slice-and-dice pipelines data by provider, pipeline, environment, and more

*Billed annually or $12 on-demand

Integrations with CI providers such as GitLab, Jenkins, CircleCI and more
Out-of-the-box dashboard to visualize the health of your pipelines
Create custom dashboards and monitors
Optimize CI resource consumption

Testing Visibility

Starting At

^$ 20

Per committer, per month*

Granular visibility into test performance

Automatic flaky test detection
Visualize traces for each test across services
Identify performance regressions and trends over time
Compatible with any CI Provider

*Billed annually or $29 on-demand

End-to-end visibility across all tests
Identify commits introducing flaky tests
Improve testing quality and developer productivity
Easily solve complex test failures with many dependencies

Integrations with CI providers such as GitLab, Jenkins, CircleCI and more
Out-of-the-box dashboard to visualize the health of your pipelines
Create custom dashboards and monitors
Optimize CI resource consumption

End-to-end visibility across all tests
Identify commits introducing flaky tests
Improve testing quality and developer productivity
Easily solve complex test failures with many dependencies

When Combined with Other Plans

Auto-instrument pipelines and tests to seamlessly pivot to related logs and errors
Set alerts to notify teams about problems in pipelines

Service and Support

Technical support across chat and email
Community Forum and Online Docs
Plans with the right level of support for your organization

Common Questions

How do you define a committer?

A committer means an active Git committer; they are identified through their Git author email address. A committer is counted towards billing if they commit at least 3 times in a given month.

How do you define a committer in a pipeline not linked in a Git repository?

In the event that a pipeline is not associated to a git repository, or git metadata is unavailable, the username of the person triggering the pipeline execution will be used as the billable committer.

Can I purchase more than one plan for my team?

Yes, customers can purchase a combination of plans. For example, for a team of 5, you can have 2 committers billed for Pipeline Visibility and 3 (other) committers billed for Testing Visibility.

How do you define a span?

For Pipeline Visibility, every pipeline, pipeline stage and pipeline job counts as a span. For Testing Visibility, every individual test run counts as a span.

What is the span limit?

400,000 spans are included per Pipeline Visibility committer per month (summed across all Pipeline Visibility committers). 1,000,000 spans are included per Testing Visibility committer per month (summed across all Testing Visibility committers).

What is the span retention period?

Pipeline and Test spans are retained for 30 days.

Can I modify the span retention period?

No, the span retention period cannot be modified.

Can I purchase additional spans?

Yes. Pipeline spans and test spans can each be purchased at $2.50 per million spans per month.

What CI providers does CI Visibility support?

Pipeline Visibility: GitLab, GitHub Actions, Jenkins, CircleCI, and Buildkite. Support for more CI providers is coming soon. Testing Visibility: Compatible with any CI provider.

What languages does CI Visibility support for tests?

CI Visibility directly supports .NET, Java, JavaScript, Python, Swift, and Ruby. Other languages and test frameworks are supported by using JUnit xml.

Serverless Monitoring

Detect and resolve performance issues in your serverless apps

Serverless Workload Monitoring

Starting At

^$ 5

Per active function, per month*

Centralized monitoring of serverless apps

Detect issues with real-time serverless metrics
Identify increases in cold starts or cold start duration
Search for functions with custom serverless tags
Correlate metrics with recent deployments

*Billed annually or $7.20 on-demand

Serverless APM (Add-On)

Starting At

^$ 10

Per million traced invocations*, per month**

Add deeper visibility into your active functions

Find bottlenecks or errors for individual invocations
Trace functions, APIs and queues all in one trace
Enrich traces with request and response payloads
Visualize requests with out-of-the-box service map

*Triggered by active functions
**Billed annually or $15 on-demand

Integrates with AWS CDK, Serverless Framework, SAM, Terraform, and more
Out-of-the-box health dashboards for API Gateway, Step Functions, SQS, DynamoDB, and more
Optimize function memory use and cold starts with Watchdog Insights
Available for Lambda functions in all major Lambda runtimes

Analyze request and response payloads for each serverless invocation
Performance metrics and version comparisons for every release with deployment tracking
Automatic APM trace map visualizes end-to-end trajectory for each request
Pivot from failing functions to related commits in GitHub

Support Plans

From basic plans to bespoke offerings, Datadog offers the right level of support for any organization.

LEARN MORE ABOUT OUR SUPPORT PLANS

Common Questions

How do you define an active function?

Datadog bills based on the average number of functions per hour across the month for your accounts. Every hour, Datadog records the number of functions that were executed one or more times and monitored by your Datadog account. At the end of the month, Datadog charges by calculating the average of the hourly number of functions recorded.

How do you define a traced invocation?

Datadog bills based on the sum of AWS Lambda invocations connected to an ingested APM trace in a given month. You will also be billed for the total number of indexed spans submitted to the Datadog APM service exceeding the bundled quantity at the end of the month.

Can I control how many invocations are traced?

Yes, Datadog allows you to control the percentage of Lambda function invocations that generate APM data.

Can Serverless APM be purchased without Serverless Workload Monitoring?

No, Serverless APM is an optional add-on for serverless functions sending metrics to Datadog via Serverless Workload Monitoring.

What is included with Serverless APM?

Span Ingestion: 50GB Ingested Spans per 1M traced invocations; then $0.10/GB.

Span Retention: 300 thousand Indexed Spans per 1M traced invocations; then $1.70 per 1 million Indexed Spans with 15-day retention (billed annually or $2.55 on-demand).

See APM common questions for additional retention periods.

What AWS Lambda runtimes do you support?

Python, Node.js, Go, Ruby, Java, and .NET

How can I send my serverless logs to Datadog?

AWS service logs are collected with the Datadog Forwarder Lambda function.

Can I monitor other AWS services used alongside my Lambda functions?

Yes, Datadog has an easy to set up AWS integration which immediately pulls in metrics and more from 85+ AWS services, including Amazon API Gateway, Amazon DynamoDB, AWS AppSync, Amazon SQS, Amazon Kinesis, and AWS Step Functions.

Network Monitoring

Monitor devices and traffic flows for complete network visibility

Network Performance
Monitoring

Starting At

^$ 5

Per host, per month*

Understand network traffic patterns and search with tags

Visualize flows on the network map
Slice-and-dice traffic by host, process, container, service, AZ, and more
Analyze system-wide DNS performance

*Billed annually or $7.20 on-demand

Network Device
Monitoring

Starting At

^$ 7

Per device, per month*

Monitor the health and performance of on-premise network devices

Out-of-the-box metrics collected from switches, routers, firewalls and more
Visualize interface bandwidth and utilization, disk, fan, and other hardware health
Comprehensive and customizable alerts

*Billed annually or $10.20 on-demand

Network traffic mapping
Meaningful traffic aggregation
Hybrid, on-premise, and cloud coverage

User-defined tagging
Device autodiscovery
Deployment in minutes

When Combined with Other Plans

Pivot seamlessly to Infrastructure, APM and Logs
Automated Infrastructure Tags

Service and Support

Technical support across chat and email
Community Forum and Online Docs
Plans with the right level of support for your organization

Common Questions

How do you define a host?

A host is any physical or virtual machine that has the Datadog agent installed with Network Performance Monitoring enabled.

How do you define a device?

A device is a physical or virtual appliance with a unique IP address that is polled using SNMP.

How do you define a flow?

A flow is a record of traffic sent and received between a source (IP:Port) and destination (IP:Port) over a five minute time period. In some cases, similar destinations are grouped into a single flow to reduce the total flow count.

How many flows are included per host?

Datadog offers 6 million flows for every host monitored with network monitoring. Flows are averaged across your entire account, not just on a per-host basis. Beyond this limit, Datadog charges $1.27 / million flows, although it is rare for our customers to exceed the included volume.

Does Network Performance Monitoring work with containers?

Yes, Datadog Network Performance Monitoring is designed to work in containerized and highly dynamic environments. User-defined tags allow you to slice and dice network flows by almost anything, including containers, clusters, pods, and deployments.

Do I need to purchase other Datadog products to use NPM or NDM?

Having all your infrastructure, traces, logs, and network information under one roof is something we encourage for comprehensive visibility, however, it is not required. Network Performance Monitoring requires the purchase of an Infrastructure Pro or Enterprise plan. Network Device Monitoring only requires the purchase of one or more infrastructure hosts which are used to poll devices.

Cloud SIEM

Detect and investigate security threats in real time

Starting At

^$ 0.20

Per GB of analyzed logs, per month*

Out-of-the-box and custom detection rules
Threat detection across all ingested data, regardless of retention
Security signals explorer and analytics
15-month retention of security signals

*Billed annually or $0.30 on-demand

Real-time threat detection
Vendor-supported integrations
All ingested data is analyzed
No proprietary query language required
Out-of-the-box rules automatically detect attacks and misconfigurations
Rules mapped to the MITRE ATT&CK® framework

Security analytics and dashboarding
15-month retention of security signals
Unlimited user accounts
Deployment in minutes
Pivot seamlessly to related metrics, traces, and logs during investigations

When Combined with Other Plans

Pivot seamlessly to related metrics, traces, and logs during investigations
Correlate security signals and detailed observability data

Service and Support

Technical support across chat and email
Community Forum and Online Docs
Plans with the right level of support for your organization

Common Questions

Which logs are analyzed by detection rules?

All ingested logs are analyzed by detection rules. In particular, detection rules analyze logs even if the customer decides not to index them.

What detection rules are available out of the box?

Datadog continuously releases new detection rules, which are automatically enabled for existing customers. To explore default threat detection rules, please visit our public docs.

How are detection rules categorized?

Rules that detect potential attacker techniques are mapped to the MITRE ATT&CK® framework. Rules that detect potential misconfigurations are aligned to the relevant compliance frameworks and controls.

Can users write their own custom threat detection rules?

Yes, Cloud SIEM includes a rule editor that lets users edit default detection rules or write their own. The editor does not require users to learn a proprietary query language.

Is there an additional cost for writing custom threat detection rules?

No, Cloud SIEM covers the analysis of ingested logs both by default detection rules, as well as by any user-defined detection rules.

Is there an additional cost for retaining security signals generated by detection rules?

No, Cloud SIEM covers the retention of security signals for 15 months.

Are there other billing options?

Annual and monthly plans are available. We can customize billing plans to meet your needs. For a detailed explanation of billing, please see our Billing FAQ.

Cloud Security Posture Management

Continuous configuration audits across cloud accounts, hosts, and containers

Starting At

^$ 7.50

Per host, per month*

Configuration rules for cloud, containers, and kubernetes
Visibility into your configuration status at any given point in time
Notify and alert on new misconfigurations
CIS, PCI-DSS, HIPAA, GDPR, and other standards

*Billed annually or $9 on-demand

Visibility into current/historic configuration status
CIS, PCI-DSS, HIPAA, GDPR, and other standards
Vendor-supported integrations for cloud service providers, Docker, Kubernetes
No proprietary query language required
Out-of-the-box rules automatically detect misconfigurations

Bespoke views of potential misconfigurations targeted for individual teams
Dynamic, aggregated security posture signals eliminate alert fatigue
Pivot seamlessly to related metrics, traces, and logs during investigations
Unlimited user accounts
Deployment in minutes

When Combined with Other Plans

One interface to correlate misconfigurations with real-time threats in Security Monitoring

Service and Support

Technical support across chat and email
Community Forum and Online Docs
Plans with the right level of support for your organization

Common Questions

How do you define a host and how do I define which hosts run CSPM?

A host is any physical or virtual OS instance that you monitor with Datadog. It could be a server, VM, node (in the case of Kubernetes) or App Service Plan instance (in the case of Azure App Services). When you enable a cloud account for CSPM, we meter and bill for hosts running in these cloud accounts. Additionally, if you enable the Datadog agent to scan your Docker and Kubernetes environments, we meter and bill for any additional hosts that are not already accounted for.

How do I monitor containers and kubernetes environments for security posture?

The Datadog Agent runs configuration scans against Docker and Kubernetes best practices and industry benchmarks. The agent runs in a container alongside any number of other containers on a host. From there it can collect configuration metadata from its neighboring containers and from the host itself. Depending on your plan, you can monitor 4 containers free for each host license. Additional containers will be billed at $0.001 per container per hour. In addition, you can purchase prepaid containers at $.50 per container per month.

Are there other billing options?

Annual, monthly and hourly plans are available. We can customize billing plans to meet your needs. For a detailed explanation of billing, please see our Billing FAQ.

Do you have special offerings for partners?

We’re always looking to partner with technology and service providers and resellers. See our Partners page for more.

Observability Pipelines

Collect, transform, and route observability data to any destination at petabyte scale

Starting At

^$ 0.10

Per ingested per GB, per month*

Collect data from any source
Route data to any destination
Enrich, structure, and transform logs, metrics, and traces
Make decisions before data leaves your environment
Monitor the health of all of your telemetry pipelines at scale

*Billed per GB of uncompressed data ingested

Control costs by reducing the volume of observability data
Reduce the size of events by dropping unnecessary fields
Transform your data to any shape and format
Redact sensitive data with custom rules
Easily scale to petabytes of data per day

Over 80 integrations with popular sources and destinations
Enrich your data with GeoIP or from lookup tables
Identify bottlenecks and verify data delivery in all your pipelines
Standardize data across all of your services

Service and Support

Technical support (Chat and Email)
Community Forum, Robust Open Source Community, and Online Docs

Common Questions

How does Observability Pipelines work?

Observability Pipelines gives the freedom to collect, transform, and route logs, metrics, and traces in your own environment in order to control costs, reduce lock-in, enhance security, and standardize data. You can learn more about how it works in our documentation.

Where does Observability Pipelines run?

Observability Pipelines is accessible in the Datadog UI, but can be installed anywhere in your infrastructure with a simple configuration and Datadog API key. This allows you to make decisions and control costs before data leaves your environment. To learn more about the setup process, check out our documentation here.

What happens if I send an unexpectedly high volume of data?

By committing to a monthly volume of data, you are not rate-limited based on a single day’s volume. Send as much data as you need on any given day without losing visibility. Assuming your average is lower on other days, your bill is unaffected. In those cases where you have a big month, not to worry! You maintain complete visibility and may be subject to overages only on the volumes that exceed your commitment.

Are there other billing options?

Annual and monthly plans are available. We can customize billing plans to meet your needs. For a detailed explanation of billing, please see our Billing FAQ.

Sensitive Data Scanner

Discover, classify, and protect your sensitive data
in real time at any scale

Starting At

^$ 0.30

Per scanned GB, per month*

Out-of-the-box and customizable detection rules
Sensitive data detection across all ingested log data, regardless of source

*Billed annually or $0.45 on-demand

Real-time sensitive data discovery and classification
Out-of-the-box and custom rule capabilities
Fully integrated with Datadog role-based access control (RBAC)
Stream-based pattern matching across your data

Granular control over data scanning and classification with scanning groups
Fully integrated with Datadog alerts and dashboards for compliance tracking and investigation
Correlate data using standard and custom tags

When Combined with Other Plans

Pivot seamlessly to related metrics, traces, and logs during investigations
Correlate security signals and detailed observability data

Service and Support

Technical support across chat and email
Community Forum and Online Docs
Plans with the right level of support for your organization

Common Questions

How does Sensitive Data Scanner work?

Sensitive Data Scanner works by using pattern-matching rules to classify and track sensitive data, and optionally scrubbing or hashing that data to prevent it from being exposed. Learn more from our documentation.

Can I filter out which logs are scanned?

Yes. Datadog allows you to set up multiple scanning groups that can be used to filter logs out using tags or log attributes.

How do I set up a scanning rule?

By either using a rule from the library or defining a custom rule. Learn how in our documentation.

What are the different options for handling sensitive data?

The Datadog Agent provides you with solutions to prevent compliance-sensitive data from being sent outside of your platform, including scrubbing. Check out more info in our documentation.

How do I ensure confidentiality / access controls for my scanning rules?

Sensitive Data Scanner is fully integrated with Datadog role-based access control (RBAC) so you can easily control which roles and users have access.

Is this available in all regions?

Yes. Sensitive Data Scanner is available in all EU- and US-hosted accounts.

Are there other billing options?

Annual and monthly plans are available. We can customize billing plans to meet your needs. For a detailed explanation of billing, please see our Billing FAQ.

Do you have special offerings for partners?

We’re always looking to partner with technology and service providers and resellers. See our Partner Network page for more.

Audit Trail

Maintain compliance, enforce platform governance, and build transparency

Starting At

2% of monthly spend*

Get full visibility into user access and platform changes across all services, empowering DevOps and compliance teams with context-rich insights.

*Billed annually or 3% on-demand

Audit all access and configuration activity across Datadog Platform
Search and analyze detailed audit events for up to 90 days
Archive audit events for long-term retention

Fully integrated with Datadog alerts and dashboards for compliance tracking and investigation
Alert on critical events such as changes in index retention
Fully Integrated with Datadog role-based access control (RBAC)

When Combined with Other Plans

Pivot seamlessly to related metrics, traces, and logs during investigations
Correlate security signals and detailed observability data

Service and Support

Technical Support (Chat and Email)
Community Forum and Online Docs

Common Questions

How does Audit Trail work?

Audit Trail captures all access and configuration change activity and provides a single view to search and analyze the events. Learn more from our documentation.

How do I set up Datadog Audit Trail?

Datadog Audit Trail can be enabled in Organization Settings, in the Audit Trail Settings page. Learn more in our docs.

How do I ensure confidentiality / access controls for my Audit Trail Events?

Datadog Audit Trail is fully integrated with Datadog role-based access control (RBAC) so you can easily control which roles and users have access. Read more in our docs.

Do I need to purchase other Datadog products to use Datadog Audit Trail?

Yes.

Is this available in all regions?

Yes, Datadog Audit Trail is available in all EU- and US- hosted accounts.

Are there other billing options?

For more information about billing options, please contact your customer service representative.

Do you have special offerings for partners?

We’re always looking to partner with technology and service providers and resellers. See our Partners page for more.

Application Security Monitoring

Context-aware and actionable threat detection for web-apps and APIs

Starting At

^$ 31

Per host, per month*

Detect OWASP attacks in real-time
Identify authenticated bad actors targeting your services
Get visibility into how your services reacted to threats
Setup easily with the unified Datadog Library

*Billed annually or $36 on-demand

Context rich signals by leveraging distributed traces
Out-of-the-box rules to detect OWASP attacks like SSRF, SQL injections, XSS
Attack flow mapping of impacted services
Pivot to related errors, metrics, and logs during investigations

Deployment in minutes
Unlimited user accounts
15-month retention of security signals
90 day retention of suspicious requests.

When Combined with Other Plans

One interface to correlate application threats with host & workload level threats or misconfiguration

Service and Support

Technical Support (Chat and Email)
Community Forum and Online Docs

Common Questions

What kind of billing plan do I need to run Application Security Monitoring (ASM)?

ASM can be purchased in addition to both Infrastructure Monitoring and APM plans.

How does Application Security Monitoring work?

Datadog ASM leverages the unified Datadog Library and adds security context about attacks and attackers to spans thanks to embedded event rules. Security alerts are automatically generated

What counts as a billable Application Security Monitoring host?

Similar to APM, a billable ASM host is a host on which ASM is enabled and that is actively submitting spans to the Datadog SaaS application.

What languages does Application Security Monitoring support?

Java, Ruby, Go, Node, .NET and PHP. Python is in Private Beta

Do I have to deploy the product across all my APM hosts?

No, you have the ability to choose which hosts you want to enable the product on.

Are there other billing options?

Annual, monthly and hourly plans are available. We can customize billing plans to meet your needs. For a detailed explanation of billing, please see our Billing FAQ.

Is this available in all regions?

Yes. Application Security Monitoring is available in all EU- and US-hosted accounts.

Do you have special offerings for partners?

We’re always looking to partner with technology and service providers and resellers. See our Partners page for more.

Cloud Workload Security

Real-time threat detection across hosts and containers

Starting At

^$ 15

Per host, per month*

Detect threats to your hosts and containers in real-time
Deep file & process activity monitoring
Performant, in-kernel, eBPF-powered analysis
Easy setup with the unified Datadog agent

*Billed annually or $18 on-demand

Curated security alerts with full file and process context
File Integrity Monitoring for both containers and hosts
Out-of-the-box, curated rules and custom rule capabilities
Real-time workload monitoring

Surface suspicious file, process, and kernel activity.
Pivot seamlessly to related metrics, traces, and logs during investigations
Unlimited user accounts
Deployment in minutes

When Combined with Other Plans

Pivot seamlessly to related metrics, traces, and logs during investigations
Correlate security signals and detailed observability data

Service and Support

Technical support across chat and email
Community Forum and Online Docs
Plans with the right level of support for your organization

Common Questions

How do you define a host and how do I define which hosts run CWS?

A host is any physical or virtual OS instance that you monitor with Datadog. It could be a server, VM, node (in the case of Kubernetes), or App Service Plan instance (in the case of Azure App Services). Hosts for CWS are instances with the Datadog Agent installed, and CWS activated.

How do I monitor containers and kubernetes workloads?

In containerized environments, the Datadog agent runs in a container alongside any number of other containers on a host. From there it monitors system activity for all running containers and for the host itself. Depending on your plan, you can monitor 4 containers free for each host license. Additional containers will be billed at $0.002 per container per hour. In addition, you can purchase prepaid containers at $1 per container per month.

Is AWS Fargate Supported?

At this time, Fargate is not supported by CWS. CWS requires access to the Linux kernel to load eBPF programs, which is not currently supported in Fargate environments.

Are there other billing options?

Annual, monthly and hourly plans are available. We can customize billing plans to meet your needs. For a detailed explanation of billing, please see our Billing FAQ.

Plans to fit your scale

Infrastructure

Log Management

APM & Continuous Profiler

Database Monitoring

Synthetic Monitoring

Incident Management

Real User Monitoring

CI Visibility

Serverless Monitoring

Network Monitoring

Cloud SIEM

CSPM

Observability Pipelines

Sensitive Data Scanner

Audit Trail

Application Security Monitoring

Workload Security

See inside any stack, any app, at any scale, anywhere

Support Plans

Analyze and explore log data in context with flexible retention

End-to-end distributed tracingand always-on production code profiling

Features

APM

APM & Continuous Profiler

Surface slow performing queries and optimize application performance

API and Browser Tests for proactive, end-to-end visibility

Fully integrated incident management in-app

Measure the end-to-end experience of web and mobile applications from your users’ perspective

Features

Mobile

Browser

Browser Premium

Support Plans

Monitor the health and performance of your CI pipelines and tests

Detect and resolve performance issues in your serverless apps

Support Plans

Monitor devices and traffic flows for complete network visibility

Detect and investigate security threats in real time

Continuous configuration audits across cloud accounts, hosts, and containers

Collect, transform, and route observability data to any destination at petabyte scale

Discover, classify, and protect your sensitive datain real time at any scale

Maintain compliance, enforce platform governance, and build transparency

Context-aware and actionable threat detection for web-apps and APIs

Real-time threat detection across hosts and containers

End-to-end distributed tracing
and always-on production code profiling

Discover, classify, and protect your sensitive data
in real time at any scale