Your retention window came from an invoice.
Two pages, five questions and one line of arithmetic. Swap the number your SIEM invoice picked for one you can defend to a supervisor, an insurer or a court.
Up to 82% lower cost than legacy SIEM, according to Vega.

Derive a window you can defend.
Work out a retention period from your risk assessment instead of your contract, and see what it costs in your own storage.
Nobody picked 30 days. The per-gigabyte price did.
Neither NIS2 nor DORA sets a retention period. Both expect you to explain how you decided yours. The questions that test it tend to arrive after day 30.
Why twelve months stops being expensive.
Vega leaves your security data in your own object storage and searches it where it sits. No ingestion fees and no duplicate storage, so each extra month costs what storage costs.
30 minutes. Your data, your numbers.
Bring your daily volume. We derive the window from your risk assessment and price twelve months in your own object storage.
Who set your retention window?
The same investigation, run twice: once the usual way, once in Vega, with a timer on screen. Then what a managed security service changes for you: less hiring, faster detection, and the evidence auditors and regulators ask for under DORA, NIS2, SOC 2 and ISO 27001, at lower cost than running a SIEM in-house.
