Best European Observability & Log Management

Looking for a GDPR-compliant alternative to Datadog, Splunk or New Relic? European observability and log management platforms bring logs, metrics and traces into one place — for full-stack visibility and, for the SIEM-adjacent tools here, security-grade log retention — while keeping the telemetry itself under EU jurisdiction.

This is a deliberately different shortlist from our broader Monitoring & Observability category: the tools below are data platforms built to ingest and correlate logs, metrics and traces at scale, not uptime checks or error trackers.

How we rank these tools — 4-step process
  1. 1
    European ownership, verified

    The company is headquartered and incorporated in the EU, EEA or Switzerland, and processes customer data in Europe. A US parent company disqualifies a tool from this page regardless of where its servers are.

  2. 2
    Category fit and hands-on review

    What the tool actually does, who it suits, and where it falls short — checked against the vendor’s own documentation, changelog and pricing page rather than its marketing copy.

  3. 3
    Compliance and pricing check

    GDPR posture, hosting location and the prices quoted on this page are verified against the vendor’s public pricing before publication, and re-checked when we revisit the category.

  4. 4
    Position on this page

    Placement on this page can be paid, and that can affect the order tools appear in. It never buys a listing: a tool that fails the checks above is not here at any price, and payment does not change the shortcomings we write about. A vendor can ask us to correct a factual error — not to remove a criticism.

Vendors can pay for visibility on this page. It never changes what an entry says about a product, including the criticism, and we earn nothing when you click through to a vendor. Paid placement can affect the order in which tools appear; it never affects whether a tool is listed. Editorial policy

How we rank these tools — 4-step process
  1. 1
    European ownership, verified

    The company is headquartered and incorporated in the EU, EEA or Switzerland, and processes customer data in Europe. A US parent company disqualifies a tool from this page regardless of where its servers or engineers sit — which is why several well-known names with genuine German or Danish founding stories are not here.

  2. 2
    Category fit and hands-on review

    What the tool actually does, who it suits, and where it falls short — checked against the vendor’s own documentation, changelog and pricing page rather than its marketing copy.

  3. 3
    Compliance and pricing check

    GDPR posture, hosting location and the prices quoted on this page are verified against the vendor’s public pricing before publication, and re-checked when we revisit the category.

  4. 4
    Position on this page

    Placement on this page can be paid, and that can affect the order tools appear in. It never buys a listing: a tool that fails the checks above is not here at any price, and payment does not change the shortcomings we write about.

Vendors can pay for visibility on this page. It never changes what an entry says about a product, including the criticism, and we earn nothing when you click through to a vendor. Editorial policy

12 European Observability & Log Management Tools

Elastic Observability

Dutch-incorporated logs, metrics and traces in one searchable, self-hostable store, built on the ELK stack

#1of 12 in this category
NetherlandsConsumption-based on ingest and retention

Guardsix (formerly LogPoint)

Danish SIEM and security-log management with node-based licensing and explicit EU sovereignty positioning

#2of 12 in this category
DenmarkNode-based licensing, quoted

Centreon

Paris-built IT and network monitoring extended into full-stack observability, open-source core

#3of 12 in this category
FranceQuoted on request; free IT Edition

Zabbix

Latvian infrastructure and log monitoring, fully open source with zero feature gating at any scale

#4of 12 in this category
LatviaFree; paid support subscriptions from $325

Icinga

German open-source monitoring, the Nagios successor, configured as code and free at any size

#5of 12 in this category
GermanyFree; paid support subscriptions via Netways

AppSignal

Dutch app monitoring with published pricing from free, logging built into every plan, no surprise overages

#6of 12 in this category
NetherlandsFree from €0; paid from €219/year

Tideways

German PHP profiling and APM, tiered by request volume, continuous production profiling at 1-5% overhead

#7of 12 in this category
GermanyTiered by request volume, published

Apica

Stockholm telemetry control plane that shapes and routes logs, metrics and traces before ingestion

#8 of 12 in this category
Sweden No public prices; free trial and ROI calculator, costs via sales
Routes and shapes telemetry before it reaches a platformLogs, metrics, traces and synthetic checksContracts under Swedish law

Blackfire

Paris-based profiling and performance monitoring that finds slow PHP and Python code at function level

#9 of 12 in this category
France Development EUR 33.25/mo, Production EUR 158.25/mo, billed yearly, excl. taxes
Function-level and continuous profilingProduction plan with 1M monitoring tracesPublic demo and student subscription

Pandora FMS

Spanish monitoring suite covering network, servers, applications and logs, with a free 50-agent edition

#10 of 12 in this category
Spain Free up to 50 agents; ONE from EUR 2,447/yr; MaaS from EUR 783/mo
Log collection, search and alertsMore than 500 pluginsOn-premise, SaaS or marketplace deployment

ITRS

London observability vendor for financial services, with Geneos, Opsview and Uptrends

#11 of 12 in this category
United Kingdom No public prices; demo on request
Geneos application monitoringOpsview infrastructure monitoringDigital experience monitoring via Uptrends

SquaredUp

Dashboards drawn live over the APIs of tools you already run, with no ingestion or storage fees

#12 of 12 in this category
United Kingdom Free USD 0; Starter USD 89, Pro USD 279, Enterprise USD 849/mo billed yearly
Free plan with three data sourcesISO 27001 and CSA STAR listedData stored in Europe or the USA by choice

Key takeaways

  • Elastic Observability ranks #1 because it is the one platform here built log-first, it can be self-hosted in full, and Elastic N.V. is incorporated in Amsterdam. Its executive team and stock listing lean toward the United States, which the review says plainly.
  • Four tools cost nothing in licence fees at some scale: Zabbix and Icinga are free and open source with no feature-gated edition, Centreon has a free self-hosted IT Edition for up to 100 hosts, and Pandora FMS has a free edition for up to 50 agents. Paid subscriptions at Zabbix and Icinga buy support, not extra features.
  • Guardsix (formerly LogPoint) is the only tool built for SIEM and security-log management and is licensed per node, while Apica sits at the other end as a telemetry pipeline that controls what reaches a platform and what it costs.
  • Ten of the twelve tools are established in seven EU member states (Netherlands, Denmark, France, Latvia, Germany, Sweden and Spain). ITRS and SquaredUp are in the United Kingdom, which is outside the EU but covered by an EU adequacy decision.
  • Published prices exist for Elastic Observability (consumption-based), Centreon, Zabbix, AppSignal, Tideways, Blackfire, Pandora FMS and SquaredUp. Guardsix, Apica and ITRS publish no prices and work through quotes or demos.
  • European ownership and European hosting are different claims. Blackfire's website runs on Amazon Web Services in Ireland, SquaredUp lets a customer pick Europe or the USA for its data, and several tools here can be self-hosted, which is the only way to name the country yourself.

European observability and log management software collects logs, metrics and traces from servers, applications and networks into one place where they can be searched, alerted on and correlated, and it is sold by a company established in the EU, the EEA, the United Kingdom or Switzerland.

The twelve tools listed here range from log-first data platforms and security-log systems to open-source infrastructure monitors and application profilers. Each was checked on the vendor's own legal notice, terms and pricing page, because the telemetry these tools hold describes exactly how your systems fail.

European observability & log management compared

European observability & log management tools compared on position, country, entry price and best use
PositionToolEstablishedEntry priceBest for
#1 Elastic Observability Netherlands Consumption-based on ingest and retention with published rates; a free self-managed tier exists Teams that want a self-hostable, search-based store for logs, metrics and traces
#2 Guardsix (formerly LogPoint) Denmark Node-based licensing, quoted on request Security teams that need SIEM-grade log retention with an EU ownership story
#3 Centreon France Free self-hosted IT-100 edition up to 100 hosts (no time limit); self-hosted Business from EUR 283 per month (125 hosts); SaaS IT Edition from EUR 425 per month (125 hosts) and Pro from EUR 1,125 per month (250 hosts), billed annually IT operations teams that want open-source monitoring that can grow into observability
#4 Zabbix Latvia Free and open source; paid support subscriptions (Silver from USD 325) Infrastructure teams that want zero licence cost at any scale
#5 Icinga Germany Free and open source; paid subscriptions for support Teams that want monitoring configured as code with no feature-gated tier
#6 AppSignal Netherlands Free from EUR 0 per month; paid from EUR 219 per year (EUR 18.25 per month billed yearly); long-term log storage and a HIPAA Compliance add-on are EUR 89 per month each Small Ruby, Elixir, Node, Python or PHP teams that want logging bundled in
#7 Tideways Germany Team and Business tiered by monthly request volume with published prices, 10% discount on annual billing; Enterprise on request PHP shops on Symfony, Laravel or Shopware that want continuous production profiling
#8 Apica Sweden No public prices; the site offers a free trial and an ROI calculator and points to sales for costs Large organisations that want to control telemetry volume and cost before storage
#9 Blackfire France Development EUR 33.25 per month billed yearly; Production EUR 158.25 per month billed yearly or EUR 189.90 billed monthly; prices exclude taxes Developer teams that want to find slow code at function level
#10 Pandora FMS Spain Free edition for up to 50 agents; ONE from EUR 2,447 per year (100 devices); MSP from EUR 0.51 per agent per month (100 agents); MaaS (SaaS) from EUR 783 per month (300 agents); NMS from EUR 1,590 per year (100 network devices); RMM from EUR 612 per year; Corporate on quotation Teams that want one Spanish vendor for infrastructure monitoring with logs and a free tier
#11 ITRS United Kingdom No public prices; the only call to action on the product pages is a demo request Large or regulated organisations that buy through a vendor relationship
#12 SquaredUp United Kingdom Free USD 0 (3 data sources, 2 interactive users); Starter USD 89, Pro USD 279 and Enterprise USD 849 per month billed annually; the page shows a USD, GBP and EUR toggle Teams that want one dashboard across the monitoring tools they already run

Every European observability & log management tool reviewed

#1 Elastic Observability

Amsterdam, Netherlands Founded 2012 Consumption-based on ingest and retention with published rates; a free self-managed tier exists Free self-managed tier

Best for: Teams that want a self-hostable, search-based store for logs, metrics and traces

  • Operating company. Elastic N.V.
  • Jurisdiction. EU (Netherlands)
  • Where the data sits. Self-managed, on Elastic Cloud, or through the AWS, Azure and Google Cloud marketplaces; EU regions are available
  • Source code. Open source
  • Replaces. Splunk, Datadog Log Management, Sumo Logic

Elastic Observability grew out of the ELK stack, Elasticsearch, Logstash and Kibana, which makes it the one platform here built log-first rather than metrics-first.

Logs, traces and metrics land in one searchable index, which removes the correlation step that costs the most time during an incident. Elastic describes infrastructure monitoring, application performance monitoring and distributed tracing, digital experience monitoring with real user monitoring and synthetics, and logs, plus LLM observability. Pricing is consumption-based on ingest and retention, and a free self-managed tier exists.

The company behind it is Elastic N.V., issuing its privacy statement from Keizersgracht 281 in Amsterdam, with its Terms of Use and cloud trial terms under elasticsearch B.V.

The caveat is weight: the executive team, the largest office and the stock listing lean toward the United States, so the jurisdiction question is more open than for a purely EU-run vendor. The core of Elasticsearch and Kibana was relicensed to AGPL v3 in 2024, which keeps a real exit through self-hosting. A team with a platform engineer who likes that work gains control, while a team without one should price the labour as well as the licence.

Operating it means running a search cluster. Shard counts, index lifecycle and retention tiers decide both performance and cost, and Elastic's licence direction has changed twice in five years, away from Apache 2.0 in 2021 and back to AGPL in 2024.

Compared with AppSignal or Tideways it asks far more of a small team, and compared with Zabbix it asks for a budget. For a shared log store across many teams, few tools here match it. For one application and a small team, the operating burden usually outweighs the benefit, and a lighter tool is the better start.

What Elastic Observability does well

  • Logs, traces and metrics in one searchable index, removing a correlation step
  • Genuinely self-hostable, including the open source core, for a real exit
  • Amsterdam-incorporated N.V. with a Dutch registered address
  • Covers APM, real user monitoring, synthetics and logs in one product
  • Free self-managed tier and published consumption rates

Where Elastic Observability falls short

  • Executive leadership and the largest office lean toward the United States
  • Cluster tuning of shards, lifecycle and retention is a specialism most teams lack
  • Licensing has changed direction twice in five years
  • Consumption pricing across ingest and retention is hard to forecast before a trial

Standout feature. The only platform on this page built log-first from the ELK stack, with a genuine self-hosted option for the full open source core.

#2 Guardsix (formerly LogPoint)

Copenhagen, Denmark Node-based licensing, quoted on request Demo on request

Best for: Security teams that need SIEM-grade log retention with an EU ownership story

  • Operating company. Logpoint
  • Jurisdiction. EU (Denmark)
  • Where the data sits. Self-hosted and air-gapped deployment options
  • Source code. Closed source
  • Replaces. Splunk Enterprise Security, Microsoft Sentinel, IBM QRadar

LogPoint rebranded to Guardsix in March 2026, which the company frames as closer alignment with managed security service providers and regulated organisations.

The product, contracts and support are unchanged: a converged SIEM, SOAR, UEBA and network detection and response platform that is log-centric by design rather than a general infrastructure or application monitor. Danish NDR vendor Muninn was acquired in 2024 and now sits inside the same platform. Buyers should note that it is a security product with a security vocabulary, so a team looking for dashboards of application latency will find the fit awkward and the onboarding heavier than expected.

Licensing is by node, the number and type of infrastructure nodes reporting in, instead of pure data-volume billing, which the company markets as more predictable than the volume pricing common among SIEM competitors.

The operating company is Danish and Summa Equity, a Stockholm-headquartered investment firm and majority owner since 2023, is also inside the EU. Self-hosted and air-gapped deployment suit regulated and public-sector buyers, and the company positions itself explicitly against US CLOUD Act and FISA 702 exposure. The company also names regulatory reporting needs such as NIS2, GDPR and ISO 27001 compliance reports, which is where a European sovereignty story most often matters to a public body.

The trade-off is the learning curve: the structured taxonomy and query language need real onboarding before a security team gets full value. Pricing is quoted, not published, so budgeting starts with a call.

Against Elastic Observability it is narrower, a security product first, and it is not the tool to pick for application tracing or uptime checks. For SIEM it is the clearest European option in this category. That narrowness is also the strength: it does one job, security log retention and correlation, and it names the jurisdiction question instead of leaving a buyer to infer it from a footer.

What Guardsix (formerly LogPoint) does well

  • Node-based licensing avoids the bill shock of pure log-volume pricing
  • Self-hosted and air-gapped deployment for regulated and public-sector buyers
  • Operating company in Denmark and majority owner in Sweden, both in the EU
  • Explicit EU-sovereignty positioning against US CLOUD Act exposure

Where Guardsix (formerly LogPoint) falls short

  • Steep learning curve in taxonomy and query language
  • Pricing is quoted rather than published
  • Narrow fit for general infrastructure or application observability
  • No free tier stated, only a demo on request

Standout feature. The only tool in this category built specifically for SIEM and security-log management, with an EU-owned sovereignty story.

#3 Centreon

Paris, France Free self-hosted IT-100 edition up to 100 hosts (no time limit); self-hosted Business from EUR 283 per month (125 hosts); SaaS IT Edition from EUR 425 per month (125 hosts) and Pro from EUR 1,125 per month (250 hosts), billed annually Free trial (Infra Monitoring and Experience Monitoring)

Best for: IT operations teams that want open-source monitoring that can grow into observability

  • Operating company. Centreon SAS
  • Jurisdiction. EU (France)
  • Source code. Open source
  • Replaces. Zabbix, Nagios, SolarWinds

Centreon started from Nagios-lineage infrastructure and network monitoring and has extended toward full-stack observability: metrics, logs and business or SLA-level views for large hybrid estates, with a footprint in French public-sector, enterprise and telecom accounts.

The free IT Edition is a self-hosted product with a capped feature set and no time limit, up to 100 hosts, not a crippled trial. A team coming from Nagios will recognise the model of hosts, services and plugins, which shortens the migration compared with a tool that asks for a new mental model.

Paid editions are published too. Self-hosted Business starts at EUR 283 a month for 125 hosts, and the SaaS IT Edition starts at EUR 425 a month for 125 hosts, with Pro at EUR 1,125 a month for 250 hosts, billed annually. The operating company is Centreon SAS in Paris.

Sixth Street Partners, a US investment firm, holds a minority growth investment, which is a financial stake rather than control, and the registered office and majority ownership remain French. Those numbers make it one of the few tools in this list where a first estimate needs no sales call, which is unusual among monitors that also sell enterprise editions.

The trade-off for the maturity is an interface that reviewers still describe as dated next to newer cloud-native tools, and weaker distributed tracing than purpose-built application performance specialists.

Compared with Zabbix it is easier to buy with support attached, and compared with Pandora FMS it has the clearer free-to-paid path for self-hosted teams. It is a monitor extended toward logs, not a log platform. It suits an operations team that wants a supported monitor with a French vendor behind it, and it is less suited to developers who want traces and profiles of application code.

What Centreon does well

  • Free, open-source IT Edition up to 100 hosts with no time limit
  • Mature hybrid on-premise and cloud infrastructure monitoring heritage
  • Registered office and majority ownership remain French
  • Published prices for self-hosted and SaaS editions in euros

Where Centreon falls short

  • Interface reads as dated next to cloud-native observability tools
  • Weaker on distributed tracing than application performance specialists
  • A US growth investor holds a minority stake
  • Logs are one signal among several, not the primary product

Standout feature. A genuinely free, self-hosted open-source edition with a clear published path to paid and SaaS editions.

#4 Zabbix

Riga, Latvia Founded 2005 Free and open source; paid support subscriptions (Silver from USD 325) Free to download

Best for: Infrastructure teams that want zero licence cost at any scale

  • Operating company. Zabbix SIA
  • Jurisdiction. EU (Latvia)
  • Where the data sits. Self-hosted, wherever you run it
  • Source code. Open source
  • Replaces. Datadog, SolarWinds, PRTG

Zabbix has been developed in Riga since 2005 and is described as founder-owned, with no external investors and no acquisitions.

The software is entirely free with no host cap and no feature gate: unlike most open-core competitors there is no paid tier that unlocks functionality the free edition withholds. Paid subscriptions, Silver from USD 325, Gold from USD 825 and Platinum on request, buy support and services rather than more product. That is why the product itself has no paywall and why the support price list is the only price list.

It monitors metrics first: hosts, services, network devices, cloud and containers. Log monitoring is available through agent log items rather than as a dedicated log-search product, and there is no native distributed tracing. That makes it a different shape from Elastic Observability or Guardsix, which store and search logs at scale.

Zabbix can run fully self-hosted, or as Zabbix Cloud priced by monitored values per second, so the data sits where you decide. Teams that need to search logs across thousands of hosts will want a dedicated log store next to it, and Zabbix then does the alerting while the other tool does the search.

The cost sits elsewhere. Self-hosting means owning the database and tuning it as the estate grows, and the templating and the interface are dated beside the newest tools.

For a team that wants monitoring with no licence line item and a large install base, it remains one of the most straightforward choices in this category, with a genuinely Latvian legal entity behind it. Its Latvian legal entity, Zabbix SIA, keeps the contracting party inside the EU even when the software is downloaded and run entirely on your own hardware without ever contacting the vendor.

What Zabbix does well

  • 100% free and open source with zero feature gating at any host count
  • Founder-owned with no venture capital or acquisition to change the terms
  • Mature, large install base and a Latvian legal entity
  • Self-hosted, so the data stays where you put it
  • Paid subscriptions buy support, not functionality

Where Zabbix falls short

  • No native distributed tracing or application performance monitoring
  • Log monitoring is agent-based, not a dedicated log-search product
  • Self-hosting means owning database tuning and scaling
  • Templating and interface are dated

Standout feature. Genuinely free at any scale, with no feature withheld behind a paid tier; the subscriptions buy support, not product.

#5 Icinga

Nuremberg, Germany Founded 2009 Free and open source; paid subscriptions for support Free to download

Best for: Teams that want monitoring configured as code with no feature-gated tier

  • Operating company. Icinga GmbH
  • Jurisdiction. EU (Germany)
  • Where the data sits. Self-hosted, wherever you run it
  • Source code. Open source
  • Replaces. Nagios XI, Datadog, SolarWinds

Icinga is the Nagios-lineage successor many infrastructure teams grow into, forked in 2009 and now operated as Icinga GmbH in Nuremberg, within the German Netways Group. Every feature in the core is free and open source with nothing held back behind a paid tier.

The only thing sold is support subscriptions, mainly for organisations that need packaged builds and vendor backing on enterprise Linux distributions. It suits teams that left Nagios years ago and want the same plugin model on a cleaner core, which is the lineage the vendor itself describes.

Configuration is code-first rather than click-first, which suits a team that wants monitoring defined in version control alongside the infrastructure it watches. It also means a steeper start than a hosted SaaS product.

The plugin ecosystem is smaller than the Nagios one it forked from, though Nagios plugins are largely compatible, and like Zabbix it monitors metrics and state first, with log and cloud coverage as additions. Larger estates, where many hosts are generated from a source of truth, are where the code-first approach pays back the time that a graphical wizard would otherwise save.

Icinga has no hosted offer, so it is a self-hosted tool in every case, which is both its sovereignty argument and its operating cost.

Compared with Zabbix it is the better fit for teams that already treat infrastructure as code, and the worse fit for teams that want a graphical setup. It is not a log platform and should be paired with one when logs matter. Teams without that discipline will do better with a hosted product, and teams with it get a monitor that is reviewed and rolled back like any other change in their repository.

What Icinga does well

  • Fully open source with no feature gating, paid tiers buy packaged support
  • Configuration as code suits teams that manage infrastructure that way
  • German-owned within the Netways Group, no non-EU investors found
  • Compatible with most Nagios plugins

Where Icinga falls short

  • Smaller plugin and integration ecosystem than the Nagios lineage
  • Steeper start than a hosted SaaS product, with self-hosting the only option
  • Metrics and state first, log and cloud coverage are additions
  • No managed cloud offer

Standout feature. Configuration as code with every feature free at any scale; the paid subscription only buys packaged builds and support.

#6 AppSignal

Amsterdam, Netherlands Founded 2012 Free from EUR 0 per month; paid from EUR 219 per year (EUR 18.25 per month billed yearly); long-term log storage and a HIPAA Compliance add-on are EUR 89 per month each Permanent free tier: 30K requests per month, 1 GB of logging, 5-day retention, no card required

Best for: Small Ruby, Elixir, Node, Python or PHP teams that want logging bundled in

  • Operating company. AppSignal B.V.
  • Jurisdiction. EU (Netherlands)
  • Where the data sits. Hosted SaaS
  • Source code. Closed source
  • Replaces. Datadog, New Relic, Honeycomb

AppSignal is a Dutch application-monitoring platform run by AppSignal B.V. in Amsterdam and founded in 2012.

It covers error tracking, performance monitoring, host metrics, anomaly detection, uptime monitoring and process check-ins across Ruby, Elixir, Node.js, JavaScript, Python, Go, Java, PHP and Rust, with OpenTelemetry, Vercel, Kubernetes and AWS CloudWatch integrations.

Logging arrived as a real product line: every plan includes 1 GB of log storage, with long-term retention as a paid add-on. Because one product covers errors, performance, hosts and logs, a small team does not have to stitch together several vendors, contracts and data processing agreements.

Pricing is published and plain. A permanent free plan covers 30,000 requests and 1 GB of logging a month with five-day retention and no card. The paid plan starts at EUR 219 a year, EUR 18.25 a month billed yearly, with long-term log storage and a HIPAA Compliance add-on at EUR 89 a month each.

The stated policy is to never charge more than agreed upfront, so monitoring keeps working past the limit rather than billing a surprise overage. That policy is the main commercial difference from usage-metered vendors, and it matters most to small teams for whom a traffic spike should not become an invoice they cannot explain internally.

The trade-off is depth. Nine languages is a fraction of what Datadog or Elastic cover, there is no self-hosted option, and logging is a bundled feature rather than a search platform for terabytes.

For a small team that wants errors, performance and logs on one capped invoice, it is the most self-serve tool in this list. Larger estates will outgrow it. The product sits on the application side of the line, so network devices and wider infrastructure need another tool alongside it.

What AppSignal does well

  • Permanent free tier with 30,000 requests and 1 GB of logging, no card required
  • Published prices from EUR 219 a year with a no-surprise-overage policy
  • Error tracking, performance, uptime and logs in one product
  • Dutch B.V. with an Amsterdam address
  • OpenTelemetry integration

Where AppSignal falls short

  • Covers nine languages against the dozens of larger platforms
  • Hosted SaaS only, with no self-hosted option
  • Long-term log storage and HIPAA Compliance are paid add-ons at EUR 89 a month each
  • Logging is bundled and not built for very large log volumes

Standout feature. A capped, published price with logging in every plan, and monitoring that keeps working past the limit instead of billing an overage.

#7 Tideways

Bonn, Germany Team and Business tiered by monthly request volume with published prices, 10% discount on annual billing; Enterprise on request 14-day free trial, no credit card required; no permanent free tier

Best for: PHP shops on Symfony, Laravel or Shopware that want continuous production profiling

  • Operating company. Tideways GmbH
  • Jurisdiction. EU (Germany)
  • Where the data sits. Hosted SaaS, operated in Germany
  • Source code. Closed source
  • Replaces. New Relic, Datadog, Blackfire

Tideways is a Bonn-based PHP profiling and application-performance platform operated by Tideways GmbH, built for PHP shops rather than as a general observability suite.

It offers automatic instrumentation without code changes for Laravel, Symfony, Magento, Shopware, WordPress and Drupal and common data stores such as MySQL and PostgreSQL, and the vendor states an overhead of 1 to 5% on most applications, low enough to profile continuously in production. Because instrumentation is automatic for the common frameworks, adoption is mostly a matter of installing the extension, which suits agencies and in-house teams alike.

The product covers monitoring and alerting, request-level profiling with distributed tracing, and error and exception tracking.

Team and Business plans are tiered by monthly requests, from 5 million up to 1 billion or more, with Business adding distributed profiling across services, a 30-day lookback against 5, 15 months of history and integrations with PagerDuty, OpsGenie and Splunk On-Call. Annual billing carries a 10% discount, and a two-month grace period precedes any automatic tier upgrade. The published tiers make a budget easy to write down before the first trial, because traffic is something a shop already knows.

The limit is scope by design: Tideways monitors PHP only, so a polyglot estate needs a second tool for Node, Go or Python services. There is no permanent free tier, only a 14-day trial without a card.

Compared with Blackfire it is tiered by request volume, which is easier to forecast for a busy shop, and compared with AppSignal it goes much deeper into PHP and much less wide. It remains a sensible companion to a log platform instead of a replacement for one, and its German hosting makes the data protection conversation shorter for agencies with German clients.

What Tideways does well

  • Automatic instrumentation for Laravel, Symfony, Magento, Shopware, WordPress and Drupal
  • Stated 1 to 5% overhead allows continuous production profiling
  • Published tiers by request volume with a two-month grace period before upgrade
  • German-hosted SaaS with a 14-day trial and no card
  • Business plan adds distributed profiling and 15 months of history

Where Tideways falls short

  • PHP only, with no coverage for Node, Go or Python services
  • No permanent free tier
  • Hosted SaaS only, with no self-hosted option
  • Not a log management product

Standout feature. Continuous production profiling for PHP at a stated 1 to 5% overhead, priced in tiers by request volume with no surprise invoices.

#8 Apica

Stockholm, Sweden No public prices; the site offers a free trial and an ROI calculator and points to sales for costs Free trial offered; length and limits are not stated on the pages read

Best for: Large organisations that want to control telemetry volume and cost before storage

  • Operating company. Apica AB
  • Jurisdiction. EU (Sweden)
  • Source code. Closed source
  • Replaces. Datadog, Splunk, New Relic

Apica describes itself as a telemetry control plane that sits before expensive platforms, so a customer decides what gets sent, when and at what cost.

Its suite names Flow, which routes and shapes telemetry before ingestion, Lake for storage and retention, Observe for correlation of logs, metrics, traces and events, Fleet for managing telemetry agents, Forge for high-cardinality metrics, Vanguard for synthetic checks and Wayfinder for test data. The site claims it reduces observability costs by up to 40%, a vendor figure rather than a measured one.

The contracting party in its terms is Apica AB, governed by the laws of Sweden with the courts of Sweden holding exclusive jurisdiction, apart from injunctive relief for confidentiality or intellectual property breaches. Its privacy policy gives a headquarters at Malmskillnadsgatan 32 in Stockholm.

No company registration number appears on the pages read, and no data centre location is named. The legal pages read also describe how notices are sent, to the address in the applicable order form, which is the normal arrangement for an enterprise contract rather than a click-through.

No prices are published. The site offers a free trial with no stated duration or limits, an ROI calculator and a sales conversation.

Compared with Elastic Observability it is not a replacement for a store so much as a layer in front of one, and compared with AppSignal it is aimed at enterprise buyers, so small teams will find less to start with. Its value shows once a log bill is the problem. A buyer should ask for the data centre location and the subprocessor list in writing during evaluation, since neither appears on the public pages that were read for this review.

What Apica does well

  • Swedish contracting entity under Swedish law and Swedish courts
  • Controls telemetry before ingestion, targeting the lever behind large bills
  • Covers logs, metrics, traces, events and synthetic checks in one suite
  • Free trial offered without a card stated

Where Apica falls short

  • No public prices, only an ROI calculator and sales contact
  • Free trial length and limits are not stated
  • No company registration number or data centre location on the pages read
  • Pages are written for enterprise buyers, which leaves small teams less to start with

Standout feature. It targets the volume and cost of telemetry before it is stored, the lever that drives most large observability bills.

#9 Blackfire

Paris, France Development EUR 33.25 per month billed yearly; Production EUR 158.25 per month billed yearly or EUR 189.90 billed monthly; prices exclude taxes No free trial; a public demo at demo.blackfire.io, and a free Profiler subscription for students through the GitHub Student Developer Pack

Best for: Developer teams that want to find slow code at function level

  • Operating company. Platform.sh SAS (trading as Upsun)
  • Jurisdiction. EU (France)
  • Where the data sits. The Blackfire website is hosted in Ireland on Amazon Web Services; where customer profile data is stored is not stated on the pages read
  • Source code. Closed source
  • Replaces. New Relic, Datadog APM

Blackfire is a profiling-led performance tool whose product pages name a PHP Profiler and a Python Profiler, performance monitoring, continuous profiling, synthetic user monitoring and CI/CD integration.

The Production plan includes profiling, performance monitoring, continuous profiling, alerting and continuous testing, with three users, one million monitoring traces, 5 GB of continuous profiling and one million front-end observability events, plus a sandbox environment. Extra traces, users and environments are priced per unit. That mix places it between a pure profiler and an application monitoring suite, closer to a developer workflow tool than to a platform for operations teams.

Blackfire is a trademark of Platform.sh SAS, trading as Upsun, a société par actions simplifiée registered at the Paris trade and companies register under number 521 496 059, with its head office at 22 rue de Palestro in Paris. Its terms name that French company as the contracting party.

The legal notice states that the website is hosted in Ireland by Amazon Web Services, and the pages read do not say where profile data is stored. The French company trades as Upsun, so a buyer signs with the same entity that runs that application platform, which keeps the contract chain short.

Development costs EUR 33.25 a month billed yearly and Production EUR 158.25 a month billed yearly, or EUR 189.90 monthly, excluding taxes. There is no free trial, only a public demo and a free student subscription.

Compared with Tideways it supports Python as well as PHP, but it has no log management or infrastructure monitoring and is a developer tool first, not a platform. For a PHP or Python team that treats performance as a code review topic, it is a sharp tool, and for anyone who needs logs, the review has to pair it with another product.

What Blackfire does well

  • French company named in the terms, registered in Paris
  • Function-level and continuous profiling is the core of the product
  • Plain euro prices with add-ons priced per unit
  • Public demo and a free subscription for students

Where Blackfire falls short

  • No free trial
  • No log management or infrastructure monitoring on the pages read
  • Extra users cost EUR 24.92 a month each on the Production plan
  • Website hosted on AWS, and the storage location of profile data is not stated

Standout feature. It finds slow code at function level and keeps performance tests in the same workflow, which a general platform does not focus on.

#10 Pandora FMS

Las Rozas de Madrid, Spain Free edition for up to 50 agents; ONE from EUR 2,447 per year (100 devices); MSP from EUR 0.51 per agent per month (100 agents); MaaS (SaaS) from EUR 783 per month (300 agents); NMS from EUR 1,590 per year (100 network devices); RMM from EUR 612 per year; Corporate on quotation Free edition with community support; the length of a trial of the paid editions is not stated on the pricing page

Best for: Teams that want one Spanish vendor for infrastructure monitoring with logs and a free tier

  • Operating company. Pandora FMS S.L.U.
  • Jurisdiction. EU (Spain)
  • Where the data sits. On-premise or cloud; Pandora FMS also lists AWS and Azure marketplace deployment
  • Source code. Open source
  • Replaces. Datadog, SolarWinds, Nagios XI

Pandora FMS is a monitoring suite whose site lists network, user experience, cloud, server, application and log monitoring.

Its log management is described as collecting and storing logs of all kinds, including Windows events, for searches and alerts, and a separate section covers a SIEM view that centralises log and event data from several systems.

More than 500 plugins are offered, and the product runs on-premise, as SaaS or through the AWS and Azure marketplaces. The breadth explains the number of editions, because the same engine is packaged for enterprises, for managed service providers, for network teams and for remote workstation management.

The site is owned and operated by Pandora FMS S.L.U. of José Echegaray 8, Las Rozas de Madrid, with corporate tax ID ES-B84491109.

The terms of use for the website are governed by Spanish law with the courts of Madrid, and they state that the hosted service and the software are governed by separate subscription terms in a written contract, which were not read.

The founding year is stated inconsistently on the site, 2004 in one place and 2005 in another. Buyers who need the contract itself should ask for the subscription terms before signing, because the website terms say plainly that they do not cover the product.

Pricing is published in euros: a free edition for 50 agents with community support, ONE from EUR 2,447 a year for 100 devices, MaaS from EUR 783 a month, NMS from EUR 1,590 a year and MSP from EUR 0.51 per agent per month.

The number of editions is the main friction, and logs sit inside a monitor, so Elastic Observability or Guardsix are stronger when search at scale is the goal. It is a credible Spanish option for teams that want monitoring and basic log handling from one vendor, and the euro price list means a first budget needs no sales conversation.

What Pandora FMS does well

  • Free edition for up to 50 agents
  • Spanish company with a tax ID in its terms and privacy notice
  • Log collection, search and alerting alongside network and server monitoring
  • Prices in euros published for every edition
  • More than 500 plugins

Where Pandora FMS falls short

  • Seven editions make it harder to see which one holds the features you need
  • The free edition has community support only
  • Subscription contract terms were not readable on the website terms page
  • Logs are one module of a monitor, not a dedicated log platform

Standout feature. Network, server, application and log monitoring in one Spanish suite with a free 50-agent edition and euro prices for each paid edition.

#11 ITRS

London, United Kingdom No public prices; the only call to action on the product pages is a demo request Demo on request

Best for: Large or regulated organisations that buy through a vendor relationship

  • Operating company. ITRS Group Limited
  • Jurisdiction. United Kingdom (outside the EU, covered by an EU adequacy decision)
  • Source code. Closed source
  • Replaces. Dynatrace, Datadog, SolarWinds

ITRS presents itself as real-time observability for financial services and regulated industries. Its product pages name Geneos for application monitoring of complex transactions, Opsview for infrastructure monitoring with dashboards and alert-noise reduction, Uptrends for synthetic checks and real-user monitoring, and Capacity Planner for capacity forecasting and cloud cost management.

The homepage claims customers include nine of the ten top investment banks and reports the acquisition of IP-Label to expand digital experience monitoring in Europe. The group has grown through acquisition, so the product names reflect different histories, and a buyer should ask which components share an agent and a data model before assuming one platform.

The controller named in its privacy notice is ITRS Group Limited at 15 Bonhill Street, London EC2A 4DN, United Kingdom, which is outside the EU but within the set this directory accepts.

ITRS's own blog reports that Montagu Private Equity agreed to acquire a majority position from TA Associates in January 2021. The privacy notice read shows no company number, and the current ownership was not re-checked on a later page. Regulated buyers in Europe may also care that the acquisition of IP-Label, a French digital experience monitoring company, adds operations on the continent.

No prices are published and the only call to action on the product pages is a demo request. That puts it at the opposite end from AppSignal or Zabbix: the product is built for estates that run trading and payments systems, and buying it is a procurement exercise.

Small teams will find it heavier than they need, and there is no free edition. For a bank with a monitoring estate and a vendor management office it is a natural candidate, and for most other readers of this page the other tools will be the faster route to value.

What ITRS does well

  • Geneos application monitoring built for financial services and regulated estates
  • UK company named in its privacy notice with a London address
  • Opsview, Uptrends and Capacity Planner give breadth beyond a single signal
  • French acquisition adds a European digital experience monitoring footprint

Where ITRS falls short

  • No published prices and no free edition
  • Sales-led, with a demo request as the only call to action
  • Outside the EU, which an EU-only contract clause will not accept
  • Heavy for small teams that need a simple monitor

Standout feature. A single vendor for application, infrastructure and digital experience monitoring aimed at regulated financial estates, sold by quote.

#12 SquaredUp

Maidenhead, United Kingdom Free USD 0 (3 data sources, 2 interactive users); Starter USD 89, Pro USD 279 and Enterprise USD 849 per month billed annually; the page shows a USD, GBP and EUR toggle Free plan with no time limit; Enterprise trial offered on the pricing page

Best for: Teams that want one dashboard across the monitoring tools they already run

  • Operating company. Squared Up Ltd
  • Jurisdiction. United Kingdom (outside the EU, covered by an EU adequacy decision)
  • Where the data sits. Hosted on AWS and Azure; customers can choose to have their data stored in Europe or in the USA
  • Independent checks. ISO 27001 (2022 framework); listed in the CSA STAR Registry
  • Source code. Closed source
  • Replaces. Grafana, Datadog dashboards

SquaredUp is a dashboarding and observability platform that, in its own words, connects directly to the APIs of the tools you already use rather than ingesting their data. The pricing page says customers pay for insights, with no per-GB ingestion fees and no storage costs.

It offers plugins for data sources, workspaces, role-based access control, scheduled and authenticated sharing, and AI-assisted dashboard authoring called SmartAssist. Because it queries sources live, a dashboard always reflects the source system, and a team can start with the tools it already pays for without migrating a single log line.

The company is Squared Up Ltd, incorporated in England and Wales under company number 07834869, with its registered office at Building 4, Foundation Park, Roxborough Way, Maidenhead SL6 3UD. Its terms are governed by English law with the non-exclusive jurisdiction of the courts of England and Wales.

It is ISO 27001 certified, listed in the CSA STAR Registry, runs on AWS and Azure, and lets customers choose Europe or the USA for data storage. The security page describes the company as UK-based and applying UK GDPR, which gives a data protection officer the facts in writing.

Prices are shown in USD with a currency toggle: Free at USD 0 with three data sources and two interactive users, then Starter at USD 89, Pro at USD 279 and Enterprise at USD 849 a month billed annually. The caveat is scope.

SquaredUp stores no logs itself, so it complements Elastic Observability, Zabbix or Icinga instead of replacing them. For a team that already has Zabbix, Icinga or cloud monitoring in place and wants one shared view, it is a lightweight addition rather than a platform decision.

What SquaredUp does well

  • Free plan with no time limit and published monthly prices
  • ISO 27001 certified and listed in the CSA STAR Registry
  • Customers can choose Europe or the USA for data storage
  • No per-GB ingestion or storage fees

Where SquaredUp falls short

  • Not a log store, so it needs other tools underneath
  • Outside the EU, which an EU-only contract clause will not accept
  • Hosted on AWS and Azure, US-owned cloud providers
  • Prices are displayed in USD by default

Standout feature. It draws dashboards over the tools you already run without ingesting their data, so there are no ingestion or storage fees to forecast.

What is the difference between log management, monitoring and observability in this list?

The three words describe overlapping jobs. Log management stores and searches the text events that systems write, which is where Elastic Observability, Guardsix and Apica start. Monitoring checks whether hosts, services and devices are up and within limits, which is where Zabbix, Icinga, Centreon and Pandora FMS start. Observability is the aim of answering a new question about a running system without shipping new code, and it needs logs, metrics and traces correlated in one place.

The tools do not all cover all three signals. Zabbix and Icinga are metrics and state first, with log monitoring as an addition. AppSignal and Tideways are application-layer tools for a language or a small team. Blackfire profiles code at function level. SquaredUp stores nothing itself and draws dashboards over the APIs of tools you already run.

Pick by the question you ask most often. If it is "what happened in this log", start with a log-first platform. If it is "which server is down", an infrastructure monitor is cheaper and simpler.

Why are Dash0 and Better Stack not in the list?

Both are often described as European, and both were read on their own legal pages. The terms of Dash0 name the provider as Dash0 Inc., with an address at 169 Madison Ave in New York, governed by the laws of the State of Delaware. The privacy policy of Better Stack says the data is processed by Better Stack, Inc., a Delaware corporation.

The rule on this page is that the contracting entity must be in the EU, the EEA, the United Kingdom or Switzerland, so a US contracting company disqualifies a tool whatever the engineering team's home town. A tool can have a European office and still put your telemetry under a US contract, and the contract is what a data protection officer reads.

Self-hosted or SaaS: where does the telemetry actually sit?

Zabbix, Icinga and Centreon IT Edition run on your own machines, so the data sits where you put it. Elastic Observability, Guardsix and Pandora FMS offer self-managed or air-gapped installs next to a hosted service. AppSignal, Tideways, Blackfire and SquaredUp are hosted services.

For the hosted ones, read what the page says rather than what the flag implies. Tideways states that it is operated in Germany. SquaredUp lets a customer choose Europe or the USA and runs on AWS and Azure. Blackfire states that its website is hosted in Ireland on AWS and does not say where profile data lands. AppSignal and Apica do not name a data centre on the pages read.

Ask the vendor to name the data centre, not the continent, before logs that contain personal data go in.

Data platform or specialist tool: how should a team choose?

A data platform such as Elastic Observability makes sense when many teams share one store and someone owns the cluster. A specialist makes sense when the question is narrow. A PHP shop that wants to find slow code gets more from Tideways or Blackfire than from a platform it must operate. A Rails or Elixir team that wants errors, performance and logs in one invoice will look at AppSignal.

Cost control is its own category. Apica targets the volume of telemetry before it is stored, which matters once a log bill grows faster than the product it monitors. ITRS and Guardsix are sold through a vendor relationship and suit regulated estates that expect a procurement process.

How we selected and ranked these 12 tools

Every tool on this page is in the European Purpose directory, which means the operating company is established in Europe and we have verified that from the company register or the vendor's own legal notice rather than from a marketing page. Tools headquartered outside Europe are not eligible, however good they are.

  1. Feature verification (weight: 40%). We check each capability against the vendor's own documentation and product pages, and record what the tool does rather than what the category is assumed to include.
  2. Ease of adoption (weight: 30%). Integrations, published API access, trial availability and how much configuration stands between signing and a usable result.
  3. Value and transparency (weight: 30%). Published pricing counts in a vendor's favour; quote-only pricing is recorded as quote-only rather than estimated. We weigh what a buyer gets for the entry price, not the headline feature count.
  4. Editorial review. Every page is researched and drafted with AI assistance, and the compliance and pricing claims are checked against the vendor's documentation before it is published under the founder's editorial responsibility. The three weights above decide the order; a position is a ranking against the other European tools in this category, not an absolute score.

Vendor-reported outcomes — ROI figures, margin uplift, time saved — are labelled as vendor claims wherever they appear on this page. We have not audited them, and neither has anyone else who quotes them. Read our full editorial process for how pages are re-verified.

Frequently asked questions

Elastic Observability holds #1 in this directory: Elastic N.V. is incorporated in Amsterdam, the product is log-first with logs, metrics and traces in one searchable store, and it can be self-hosted in full. The right answer still depends on the job. Guardsix suits security-grade log retention, Zabbix or Icinga suit infrastructure monitoring with no licence cost, AppSignal suits a small application team that wants published prices, and Apica suits large estates that need to control telemetry volume.

All twelve tools are positioned as European alternatives to at least one of them. Elastic Observability and Apica are the closest to a Datadog or Splunk data platform, Guardsix replaces Splunk for security log management, Centreon, Zabbix, Icinga and Pandora FMS replace the infrastructure half of Datadog, and AppSignal, Tideways and Blackfire are lighter application-monitoring alternatives to New Relic for smaller teams.

It splits three ways. Zabbix and Icinga have no licence fee at any scale and sell support, and Centreon and Pandora FMS have free editions with limits. AppSignal (from EUR 0, paid from EUR 219 a year), Tideways (tiered by requests), Blackfire (EUR 33.25 and EUR 158.25 a month) and SquaredUp (USD 0 to USD 849 a month) publish prices. Guardsix, Apica and ITRS are quote-only, so a first budget needs a sales conversation.

Yes, six. Zabbix and Icinga are free and open source with no feature gating. Centreon's IT Edition is free to self-host up to 100 hosts. Pandora FMS has a free edition for up to 50 agents with community support. AppSignal has a permanent free tier of 30,000 requests and 1 GB of logging a month with five-day retention, and SquaredUp has a free plan with three data sources.

Guardsix, rebranded from LogPoint in March 2026, is the only tool here built as a SIEM and security-operations platform. It is Copenhagen-based, licensed per node rather than by data volume, and offers self-hosted and air-gapped deployment. The other eleven tools are general observability or monitoring products, although Elastic Observability and Pandora FMS also store and search logs.

Tideways and Blackfire are both PHP-first. Tideways, from Bonn, is tiered by monthly requests and offers a 14-day trial without a card. Blackfire, from Paris, sells a Development plan at EUR 33.25 a month and a Production plan at EUR 158.25 a month billed yearly, with no free trial but a public demo. AppSignal also supports PHP among nine languages and bundles logging.

ITRS Group Limited in London and Squared Up Ltd in Maidenhead are outside the EU. The United Kingdom is covered by an EU adequacy decision, so personal data can be transferred to it without additional safeguards. A contract that requires an EU-established processor would not be met by either, and the other ten tools in the list are in EU member states.

Not on this list?

If you build a European observability or log management tool that belongs here, tell us about it. Every suggestion is checked against the same criteria as the tools above: European ownership and hosting, a real product, and pricing we can verify. A listing is editorial, and we say so on this page where placement is paid.

Suggest your tool