Sumo Logic

Cloud-Native Log Analytics and Security Operationssumologic.com

Company typePublic
Founded2010
HeadquartersRedwood City, United States
Headcount501–1,000
GTM typeB2B
OfferingSoftware

Sumo Logic firmographics

Firmographics

Name: Sumo Logic
Legal name: Sumo Logic Inc.
Website: https://sumologic.com
Company type: Public
Founded year: 2010
Operating status: Operating
Headcount range: 501–1,000 employees
Ownership category
akta.pro rank

Sumo Logic industry classification

Industry

Product category: Cloud-Native Log Analytics and Security Operations
NAICS: Custom Computer Programming Services (541511), Computer Systems Design Services (541512), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
SIC: Services-Computer Integrated Systems Design (7373), Finance Services (6199)
akta.pro primary industry: Configuration Management Database (CMDB) Platforms (HDAEALAE)
akta.pro secondary industries: IT Asset Management (ITAM) Platforms (HDAEALAD), Database-as-a-Service (DBaaS) Platforms (HDAEAAAN), KYC/KYB Identity Verification & Onboarding (FSADALAA)

Keywords

Cloud log analytics
Cloud SIEM platform
Security orchestration automation
Application observability software
Infrastructure monitoring SaaS

Where Sumo Logic is headquartered

Location

Headquarters

HQ city: Redwood City
HQ country: United States
HQ region: North America

Offices10 records

Markets served

Sumo Logic business model

Business model

GTM type: B2B
Offering type: Software
Cost components: Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations

Revenue model

Flex Credit Subscription: Primary revenue stream via credit-based subscription tied to scan/query volume rather than ingest. Customers purchase credits that are consumed by querying data; zero-dollar ingest eliminates ingest-based fees. Multi-tier with options for credit-based or tiered subscriptions.
Self-Serve Checkout (Pay-as-you-go tier): Self-serve plan upgrades via Zuora-powered checkout without sales assistance, enabling lower-friction entry-level subscriptions for SMB and trial conversion.
Enterprise ARR Contracts: Over 90% of revenue comes from annual recurring revenue contracts, indicating a subscription SaaS model dominated by multi-year enterprise agreements, particularly for Cloud SIEM, Cloud SOAR, and Dojo AI offerings.
Cloud SOAR Premium Add-on: Advanced security management features such as Cloud SOAR are subject to incremental qualification and licensing beyond base platform subscriptions.

Pricing tiers

Model	Billing	Price
Usage-based	Annual	Flex Credit Subscription (zero-dollar ingest)
Freemium	Pay-as-you-go	30-Day Free Trial
Hybrid	Annual	Self-Serve Checkout Plans
Subscription	Multi-year contract	Enterprise Quote-Based SIEM

Go-to-market motion5 records

Distribution channels6 records

Marketing channels11 records

Sumo Logic product offering

Product offering

Core offering

Sumo Logic sells a cloud-native SaaS Intelligent Operations Platform that unifies log analytics, Cloud SIEM, Cloud SOAR, and application/infrastructure observability for enterprise security and DevOps teams. The platform is powered by logs as the atomic telemetry unit, patented ML analytics, Flex Licensing with zero-dollar ingest, and the Dojo AI multi-agent AI platform built on Amazon Bedrock, deployed across 11 AWS regions including sovereign cloud environments.

Differentiator

Problem solved

Functional benefit

Brands

Dojo AI: Multi-agent AI platform for intelligent security operations and incident response, including Mobot conversational interface, SOC Analyst Agent, Summary Agent, Query Agent, and Knowledge Agent.
Cloud SIEM
Cloud SOAR
Mobot

Products and services

Sumo Logic Intelligent Operations Platform Cloud-native SaaS log analytics platform delivering AI-powered log analytics, SIEM, and SOAR capabilities from a single source of truth for enterprise security, development, and operations teams.
Dojo AI Multi-agent AI platform built to power intelligent security operations and incident response, including the Mobot conversational interface, specialized agents (Summary Agent, SOC Analyst Agent, Query Agent, Knowledge Agent), and a Model Context Protocol (MCP) Server for connecting external AI systems.
Cloud SIEM Cloud-native Security Information and Event Management solution providing real-time threat detection, AI-guided investigation, and automated response. Combines UEBA behavioral analytics, MITRE ATT&CK coverage, Signals and Insights, threat intelligence enrichment, and built-in automation with playbooks. Supports Detection-as-Code via GitHub.
Cloud SOAR Security Orchestration, Automation and Response platform integrated into the Sumo Logic platform with automated playbooks, hundreds of out-of-the-box integrations, Terraform management, and public APIs.
Logs for Security Integrated cloud security platform providing AWS protection, PCI compliance, and AI-driven guided search across AWS, Azure, and Google Cloud with threat intelligence enrichment and pre-built PCI compliance dashboards.
Log Analytics (Monitoring and Troubleshooting) Centralized log management and analytics for collecting, securing, and analyzing structured and unstructured data across cloud and on-premises environments, with ML-powered monitoring features (LogCompare, LogReduce, Outlier Detection) and SLI/SLO reliability management.
Application Observability Fully integrated observability platform for all application data including logs, metrics, and traces across the entire development lifecycle, with distributed tracing and APM capabilities to reduce downtime and resolve customer-impacting issues faster.
Infrastructure Monitoring Comprehensive visibility and control over tech stacks using OpenTelemetry, with a unified view of logs, metrics, traces, and events across cloud and hybrid environments to resolve issues and optimize capacity.
Sumo Logic Mo Copilot AI-powered assistant that accelerates investigations and troubleshooting in logs by allowing questions in plain English with contextual suggestions, conversation history, auto-visualization, and auto-completion of natural language queries.
Sensu Open-source observability and monitoring product acquired by Sumo Logic to enhance its observability offerings with OpenTelemetry support; maintained as a standalone product within Sumo Logic's portfolio.

Quantifiable outcome

80% decrease in MTTR and MTTD
+9 more outcomes

Companies that use Sumo Logic

Customer profile

Named customers24 records

Segments7 records

Ideal customer profiles5 records

Sumo Logic technology and API

Technology

Technology focussed Yes

API detail

Has API: Yes
API docs
API detail

Core technology

AI maturity

App detail

Integration57 records

AI capability13 records

Feature10 records

Sumo Logic partnerships and signals

Strategic signal

Partnerships

Twelve partnerships are on record, tiered major, flagship and core.

SensumajorStrategic or Co-development Partner · 2 June 2021Sumo Logic acquired Sensu (Portland-based startup) in 2021 to enhance its observability offerings. The acquisition integrated Sensu's open-source monitoring tools and extended product development, particularly in OpenTelemetry support, while keeping Sensu as a standalone product with Sumo Logic's comprehensive suite of monitoring and analytics tools.
DFLabs S.p.A.majorStrategic or Co-development Partner · 25 May 2021Sumo Logic completed its acquisition of DF Labs S.p.A. (an Italian SOAR software provider) in May 2021 to expand its Cloud SIEM and automation capabilities. The deal integrated DFLabs' technology into Sumo Logic's security platform, with Dario Forte (DFLabs founder and CEO) becoming VP and General Manager of Orchestration and Automation at Sumo Logic.
Amazon Web Services (AWS)flagshipStrategic or Co-development PartnerSumo Logic is built natively on AWS infrastructure and serves as a key AWS partner. Sumo Logic deploys across 11+ AWS regions including AWS European Sovereign Cloud and AWS Swiss Data Center, with first-party integrations to Amazon Bedrock, Amazon Nova 2 (Lite, Pro, Sonic, Omni), Bedrock AgentCore, AWS Security Hub OCSF, AWS FedRAMP, and AWS CloudTrail. Co-marketed at AWS re:Invent 2025 and AWS Summit.
Anthropic (Claude)coreTechnology or IntegrationSumo Logic developed a Claude Compliance API integration that collects audit log events (admin activities, logins, API key lifecycle, file operations) from Claude Enterprise and Claude Platform, surfacing them alongside other SaaS applications in Sumo Logic. Available in Sumo Logic App Catalog. Note: When using Amazon Bedrock, third-party model providers like Anthropic do not have access to customer inputs/outputs.
SnowflakecoreTechnology or IntegrationSumo Logic launched a Snowflake Logs App to provide customers enhanced visibility, security analytics, and troubleshooting across Snowflake data platforms. Real-time monitoring of user activity, configuration changes, and performance issues. Available in the Sumo Logic App Catalog.
DatabrickscoreTechnology or IntegrationSumo Logic launched a Databricks Audit App providing centralized visibility and security monitoring for Databricks environments, allowing MSPs and internal IT teams to monitor login activity, query behavior, and audit logs from a single dashboard. Available in the Sumo Logic App Catalog.
1PasswordcoreTechnology or IntegrationSumo Logic integrated with 1Password's Users API for Partners (OAuth 2.0) to automate SOC workflows, allowing security teams to automate user management in response to security risks and contain risks faster via Sumo Logic's automated security workflows.
CrowdStrikecoreTechnology or IntegrationCrowdStrike is a launch partner for 1Password's Users API for Partners, integrating the OAuth 2.0-based API with Sumo Logic and other security platforms to enable automated user suspension/restore during active security incidents.
BlinkOpscoreTechnology or IntegrationBlinkOps is a launch partner integrating 1Password's Users API into Sumo Logic's automated SOC workflows for faster incident response.
ElasticcoreTechnology or IntegrationElastic is a launch partner integrating 1Password's Users API into Sumo Logic's automated SOC workflows for faster incident response.
TinescoreTechnology or IntegrationTines is a launch partner integrating 1Password's Users API into Sumo Logic's automated SOC workflows for faster incident response.
TorqcoreTechnology or IntegrationTorq is a launch partner integrating 1Password's Users API into Sumo Logic's automated SOC workflows for faster incident response.

Scale indicators21 records

Recent moves8 records

Expansion highlights7 records

Sumo Logic competitors and assessment

Company assessment

Direct peers

Datadog: Cloud observability and security monitoring platform with logs, APM, infrastructure monitoring, and Cloud SIEM. Sumo Logic maintains a direct competitive page (vs Datadog), positioning Flex Licensing against Datadog's ingest-based model.
CrowdStrike (NG-SIEM / Falcon LogScale): Endpoint-led cybersecurity platform with NG-SIEM and LogScale (formerly Humio) for log analytics. Direct competitor in next-gen SIEM evaluations; Sumo Logic is frequently benchmarked alongside CrowdStrike in SIEM comparison articles.
New Relic: Cloud-based observability platform (APM, infrastructure, logs, browser, mobile). Direct competitor for DevOps/SRE budgets, especially in the SMB and mid-market where Sumo Logic also runs a self-serve motion.
Google SecOps (Chronicle): Google's cloud SIEM and security operations platform built on Chronicle. Direct competitor in cloud-native SIEM, increasingly integrated with Gemini AI; Sumo Logic maintains a vs Google SecOps comparison page.
Splunk (Cisco): The leading SIEM and log analytics platform, now owned by Cisco. Most direct competitor in enterprise log management and security analytics; Sumo Logic explicitly markets competitive comparisons (vs Splunk Enterprise Security) and competes head-to-head on TCO with Flex Licensing.
Microsoft Sentinel: Cloud-native SIEM built on Azure, bundled with the Microsoft security stack. A core Sumo Logic competitor in enterprise SIEM, leveraging Azure E5/Microsoft 365 bundling; Sumo Logic maintains a vs Sentinel comparison page.
Elastic: Search-powered observability and security analytics platform (Elastic Security SIEM, ELK stack). Direct competitor in log analytics and cloud SIEM; Sumo Logic maintains a vs Elastic comparison page and competes in MSSP channel.
Dynatrace: Enterprise observability and APM platform with log and security analytics capabilities. Direct competitor in observability buying centers and increasingly in cloud SIEM-style workflows.

Broad incumbents

Rapid7: Security analytics and SIEM/observability vendor (InsightIDR, InsightConnect) serving mid-market and enterprise. Competitor in SIEM and security analytics buying centers, particularly in MSSP-led deployments.
IBM QRadar: Legacy on-prem SIEM from IBM, now repositioning toward QRadar SaaS on AWS. Incumbent SIEM vendor frequently displaced by Sumo Logic; Sumo maintains a vs QRadar comparison page targeting QRadar migration workloads.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat7 records

Key risks6 records

Key highlights7 records

Customer concentration

Sumo Logic compliance and trust

Trust signal

Compliance10 records

Sumo Logic financial estimates

Financial estimate

Revenue estimate

Valuation estimate

Sumo Logic leadership team

Management profile

Number of profiles

Profiles3 records

Sumo Logic subsidiaries and ownership

Company hierarchy

Subsidiaries2 records

Sumo Logic funding detail

Funding detail

Funding overview

Funding rounds6 records

Investors13 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

Sumo Logic M&A and investment

M&A and investment

M&A4 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Sumo Logic

What does Sumo Logic do?

Is Sumo Logic a public or private company?

Sumo Logic is a public company. It is classified as private equity controlled and is currently operating.

When was Sumo Logic founded?

Sumo Logic was founded in 2010. It employs 501 to 1,000 people.

Where is Sumo Logic based?

Sumo Logic is headquartered in Redwood City, United States, in the North America region.

How does Sumo Logic make money?

Four revenue lines are on record. Flex Credit Subscription is the primary driver. The others are self-Serve Checkout (Pay-as-you-go tier), enterprise ARR Contracts and cloud SOAR Premium Add-on.

Who are Sumo Logic's main competitors?

Direct peers on record are Datadog, CrowdStrike (NG-SIEM / Falcon LogScale), New Relic, Google SecOps (Chronicle), Splunk (Cisco), Microsoft Sentinel, Elastic and Dynatrace. Broad incumbents are Rapid7 and IBM QRadar.

Does Sumo Logic have an API?

Yes. Sumo Logic offers a public API documented at sumologic.com/help/docs/api/. Capabilities include ingesting data via Hosted Collectors and the OpenTelemetry Collector, executing Cloud SOAR playbooks (attach, list, execute) via REST APIs, submitting and managing data deletion requests, managing access keys with permission scoping and rotation policies, provisioning users via SCIM, and managing Terraform-based playbook deployments. OAuth 2.0 authentication is supported by partner integrations (e.g., 1Password Users API for Partners). An Automation Service Public API is available for Cloud SOAR playbook execution. Sumo Logic also publishes MCP (Model Context Protocol) Server that connects Sumo Logic agents with external AI ecosystems, third-party systems and proprietary models. Developer documentation is at www.sumologic.com/help/docs/api.

What industry is Sumo Logic in?

Sumo Logic's product category is Cloud-Native Log Analytics and Security Operations. Its primary akta.pro industry code is HDAEALAE, Configuration Management Database (CMDB) Platforms, with a secondary code of HDAEALAD, IT Asset Management (ITAM) Platforms. Its NAICS code is 541511 and its SIC code is 7373.