Logpoint
European SIEM with licensing you can predict - European alternative based in Denmark
Quick Overview
| Company | Logpoint |
|---|---|
| Category | SIEM & Security Monitoring |
| Headquarters | Copenhagen, Denmark |
| EU/European | Yes - Denmark |
| GDPR Compliant | Yes |
| Main Features | SIEM with SOAR & UEBA, Predictable node licensing, EU-only deployment |
| Pricing | Per node or per device licence |
| Best For | European enterprises and public bodies replacing Splunk or QRadar |
| Replaces | Splunk, Microsoft Sentinel, IBM QRadar |
Detailed Review
Logpoint is a Danish SIEM vendor built for European organisations that need security monitoring without an American platform underneath it. The suite covers log collection and correlation, user behaviour analytics and automated response in one product.
What Makes Logpoint Stand Out
Logpoint's most quoted advantage is commercial: licensing by node rather than by data volume. SIEM projects fail on cost when the answer to 'should we ingest this log source' becomes a budget question — and volume pricing makes it one every time.
What the Platform Covers
Log collection and normalisation across infrastructure and applications, correlation rules and threat detection, user and entity behaviour analytics, SOAR playbooks for automated response, and compliance reporting for NIS2, GDPR and ISO 27001.
European Jurisdiction and NIS2
Logpoint is headquartered in Copenhagen with European deployment options and holds EU security certifications. Security logs are the most sensitive telemetry an organisation produces — they describe its defences and its failures — which makes vendor jurisdiction a national security question for public bodies.
Security logs describe an organisation's defences, its blind spots and its incidents. Under NIS2, in-scope organisations across energy, transport, health, digital infrastructure and public administration now have reporting duties and supply chain obligations that make the origin of the security stack part of the compliance question rather than a preference.
Pricing
Licensed per node or per device rather than per gigabyte ingested, which is the difference that decides most Splunk replacements. Available as software, appliance or SaaS.
Logpoint vs Splunk and Microsoft Sentinel
Against Splunk, Microsoft Sentinel, IBM QRadar, the two European arguments are cost model and jurisdiction. Volume-based pricing turns every new log source into a budget decision, which is how SIEM deployments end up blind in exactly the places that matter; and security telemetry is the last data set most European public bodies want under foreign jurisdiction.
Who Should Use Logpoint
Logpoint suits European enterprises, government bodies and MSSPs that need a SIEM under EU jurisdiction with costs that do not scale with log volume.
Pros and Cons
Pros
- Node-based licensing, not per gigabyte
- SIEM, UEBA and SOAR in one platform
- EU-only deployment options
- Compliance reporting for NIS2 and ISO 27001
- Danish company with EU certifications
- Software, appliance or SaaS
Cons
- Smaller detection content library than SEKOIA
- Node counting needs care on large estates
- Less third-party tooling than Splunk
- Enterprise sales cycle
Alternatives to Logpoint
Looking for other European security monitoring platforms? Here are the alternatives worth comparing:
Frequently Asked Questions
Logpoint is based in Denmark and operates under European data-protection rules including the GDPR. Security logs contain personal data — usernames, IP addresses, access times — so this is a processing question as well as a security one.
Logpoint is based in Denmark. Security telemetry describes an organisation's defences and its failures, which is why the vendor's jurisdiction carries unusual weight here.
Log collection and normalisation across infrastructure and applications, correlation rules and threat detection, user and entity behaviour analytics, SOAR playbooks for automated response, and compliance reporting for NIS2, GDPR and ISO 27001.
Licensed per node or per device rather than per gigabyte ingested, which is the difference that decides most Splunk replacements. Available as software, appliance or SaaS.
Logpoint is a European alternative to Splunk, Microsoft Sentinel, IBM QRadar, generally with a cost model that does not scale directly with log volume.
Detection and logging are foundational to the NIS2 obligations around incident handling and reporting, and this category is where most of that capability sits. No product delivers compliance on its own — the directive covers governance, supply chain and reporting timelines too — but you cannot report an incident within the deadline if nothing detected it.