Overview
Collect, Normalize, Enrich, Optimize, Route
Dataflows should be pipelines. That's why Tenzir makes it easy to build, manage, and automate security data workflows with modular, composable operators.
Tenzir is the low-code data pipeline management solution for SIEM cost optimization and building a security data lake. Collect from any source, normalize to OCSF, enrich with asset and threat data, execute streaming detections, store data in low-cost storage and rehydrate as needed to any destination.
Cut your event volume in half to slash your data costs downstream. The Tenzir Query Language (TQL) makes writing pipelines a breeze and is perfect for large, complex organizations that run their infrastructure as code. The open-source core and community-driven content library makes Tenzir a foundation to build on.
Highlights
- Slash SIEM costs: Tenzir provides all the necessary building blocks to filter, trim, aggregate, sample, and deduplicate your data streams. Native dashboards make it easy to visualize and communicate your cost savings.
- Own your OCSF security data lake: Tenzir's native pipeline language comes with dedicated OCSF features to simplify data mapping and enrichment with threat intelligence or asset data.
- Execute detections and streaming analytics: Tenzir's pipeline is a powerful streaming execution engine. In the Tenzir Query Language (TQL), you can easily express powerful detections, such as streaming aggregations and comparison against dynamically computed baselines in the form of lookup tables. Uplevel your threat hunting and detection engineering upstream of your SIEM.
Details
Unlock automation with AI agent solutions

Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
Refunds are evaluated on a case-by-case basis within 14 days of purchase. To request a refund, buyers must contact us at support@tenzir.com with their order ID and reason for the request. Refunds may be granted for service interruptions, billing errors, or unmet product expectations. We strive to ensure customer satisfaction and will work with you to resolve any concerns.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
ECS Container image only delivery option
- Amazon ECS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
See https://docs.tenzir.com/changelog/node/Â for release notes.
Additional details
Usage instructions
Follow our detailed AWS instructions at https://docs.tenzir.com/guides/node-setup/deploy-a-node/#aws to deploy your Tenzir Node.
CloudFormation Deployment: Deploy a single Tenzir Node into ECS: https://console.aws.amazon.com/cloudformation/home?region=eu-west-1#/stacks/new?templateURL=https://tenzir-marketplace-resources.s3.eu-west-1.amazonaws.com/single-node-container.yamlÂ
Resources
Vendor resources
Support
Vendor support
For any questions, issues, or feedback related to the Tenzir, buyers can reach us through the following support channels:
- Email: support@tenzir.comÂ
- Website: https://tenzir.com/supportÂ
- Discord: Join our community and technical support team at https://docs.tenzir.com/discordÂ
Tenzir provides responsive, enterprise-grade support tailored to your organization's needs. Our standard support includes access to documentation, community forums, and best-effort email responses during business hours (CET). For customers on Professional or Enterprise plans, we offer priority support with guaranteed response time SLAs, including assistance with deployment, pipeline design, and troubleshooting.
Whether you deploy Tenzir in your own AWS account or choose our fully managed cloud offering, our support team ensures a smooth onboarding experience and ongoing operational reliability. We work closely with SecOps teams, detection engineers, and platform owners to help operationalize and optimize their data pipelines.
Tenzir is committed to transparency, technical depth, and fast turnaround. Our team includes the core developers behind the platform, ensuring that any critical issues are handled by those with deep system knowledge. We're here to help you succeed with open, composable data pipelines for modern security operations.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.