ReliaQuest GreyMatter pricing.
Platform fee (GreyMatter) + service fee structure. GreyMatter sits on top of the customer's existing SIEM (Splunk, Sentinel, Chronicle) and is sized by log source count and analyst tier.
ReliaQuest GreyMatter does not publish a list price on its official page in 2026 (Quote-only ('Get a Demo' on official page)). Field-reported bands cluster at 250,000 to 1,500,000 USD per year / enterprise contract, sourced from G2 deal data, channel-partner listings, and Reddit r/cybersecurity quote dumps verified 2026-06-19.
Ledger entry
What changes the quote
The headline hybrid band moves with endpoint count, contract length, 24x7 vs business-hours coverage, the inclusion of an incident-response retainer, whether the customer brings their own SIEM, and the compliance overlay (HIPAA, PCI, CMMC L2, FedRAMP, DORA). See /annex/quote-decoder for the question ladder that decodes a ReliaQuest GreyMatter quote line by line.
What is bundled and what gets line-itemed
Bundled into the base subscription: 24x7 SOC monitoring, EDR licence (where vendor-supplied), portal access, standard onboarding. Line-itemed at extra cost: ingest overage above the contracted GB/day, non-standard log sources, dedicated tenancy, evidence packs for regulated frameworks, IR retainer hours, and contract off-boarding. Cross-reference /annex/hidden-costs for the full schedule.
Recent changes
Continued agentic-AI feature push in 2026 (Agentic AI Platform branding); enterprise-only sales motion maintained.
Source
Primary source: https://www.reliaquest.com/managed-detection-and-response/, verified 2026-06-19. Inferred-band sourcing note: Enterprise-only sales motion; G2 and Gartner review data 2025-2026 indicates six- to seven-figure annual commits typical.
See notes to the ledger for the source-mark legend and the inferred-band derivation methodology.