Overview
Traditional SIEMs break at cloud scale. Modern cloud infrastructure generates more data than legacy tools can handle. The result:
Your Queries Get Slower As your data grows, query times balloon from seconds to minutes - and then to hours. When every second counts during an incident, waiting isn't an option.
You're Forced to Drop Data Retention windows shrink to days or weeks. Logs get sampled. The choice between visibility and cost creates blind spots attackers exploit.
Your AI Tools Can't Run AI needs complete historical context to work effectively. Slow queries and limited retention mean your security copilots sit idle or timeout.
Scanner unlocks the power of your security data - A cloud-native security data lake that never slows down, never drops data, and gives you complete control.
Highlights
- Collect & Enrich: Build your security data lake in an afternoon with schema-less ingestion from any source. - Enrich logs with threat intel, custom transformations, and lookup tables - Data stays in your S3 buckets - you own it, no vendor lock-in Search & Investigate: Lightning-fast full-text search across petabytes. 100x faster than Athena. - Find IP addresses, file hashes, or suspicious patterns in under 10 seconds - Search years of historical logs as fast as yesterday's data
- Detections & Response: Streaming query engine that continuously evaluates rules - alerting in minutes. - 400+ out-of-the-box rules covering 40+ log sources and MITRE ATT&CK - Manage and customize rules in GitHub, deploy through CI/CD
- MCP & APIs: First security data lake with native Model Context Protocol support. - API-first architecture for AI agents and automation tools - Turn your logs into endpoints for programmatic access
Details
Unlock automation with AI agent solutions

Features and programs
Trust Center
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
|---|---|---|
100 GB Per Day | Multi-tenant Instance, 12mo Retention,100 detection rules | $30,000.00 |
500 GB Per Day | Single-tenant Instance, 12mo Retention, 100 detection rules | $90,000.00 |
5 TB Per Day | Bring-Your-Own-Cloud Deployment, 12mo Retention, Unlimited detection rules | $500,000.00 |
The following dimensions are not included in the contract terms, which will be charged based on your usage.
Dimension | Cost/unit |
|---|---|
Additional usage as defined by contract. | $0.01 |
Vendor refund policy
In the event of a termination by Customer pursuant, Scanner will refund to Customer a pro rata share of any unused amounts prepaid by Customer under the applicable Quote for the Services on the basis of the remaining portion of the current subscription term (a Pro Rated Refund). Scanner will issue the Pro Rated Refund directly to Customer. In the event Scanner terminates this Agreement, Customer shall be required to pay through the remainder of the term indicated in the Quote.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Each Scanner customer receives support via a private Slack channel. Support is also available via email to the customer's account team or via support@scanner.dev .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
