SGBox
SGBox S.r.l. is a Milan-based, privately held Italian cybersecurity vendor that offers a unified, modular SIEM and SOAR platform with device-based pricing and unlimited data, distributed 100% through a global partner network and serving manufacturing, public administration, financial, healthcare, utilities, and legal sector organizations across EMEA and the Middle East.
- Company typePrivate
- Founded2009
- HeadquartersMilan, Italy
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What SGBox does
SGBox S.r.l. is a privately held Italian cybersecurity company headquartered in Milan (Via Melchiorre Gioia, 168) that provides a unified, modular SIEM and SOAR platform for IT and OT security monitoring. The platform centralizes log collection from any source, applies event correlation and advanced analytics, and supports automated response workflows, with add-on modules covering Log Management, Cloud SIEM/Cloud Log Management, User Behavior Analytics, Threat Intelligence Feed, Network Vulnerability Scanner, File Integrity Monitoring, Active Directory Auditor, and Incident Management. The company targets six primary verticals: manufacturing, public administration, financial services, healthcare, utilities, and legal. Its commercial model is differentiated by a device-based licensing scheme with unlimited data volume, marketed as 'Predictable Price, Unlimited Data,' and intended to address the cost unpredictability common to EPS- or volume-based SIEM contracts. Distribution is 100% indirect via a 3-tier global partner program, supplemented by a separate technology partner ecosystem covering Web, Firewall, OS, IoT/OT, and Network integrations. The company is oriented around European regulatory compliance (GDPR, NIS2, Swiss nLPD, Italian Guarantor of Privacy), and named customers include Electrolux, Sodexo, Sisal, Italiaonline, Esprinet, Comune di Modena, Comune di Novi Ligure, and the government of Montenegro. The wholly-owned business unit CyberTrust 365 extends the offering into managed security services, including Managed SIEM and 24/7 SOC. No revenue, headcount, funding, or management team information is publicly disclosed.
SGBox firmographics
Firmographics- Name
- SGBox
- Legal name
- SGBox S.r.l.
- Website
- https://sgbox.it
- Company type
- Private
- Founded year
- 2009
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- SGBox S.r.l. is a Milan-based, privately held Italian cybersecurity vendor that offers a unified, modular SIEM and SOAR platform with device-based pricing and unlimited data, distributed 100% through a global partner network and serving manufacturing, public administration, financial, healthcare, utilities, and legal sector organizations across EMEA and the Middle East.
- Ownership category
- akta.pro rank
SGBox industry classification
Industry- Product category
- Security Information and Event Management (SIEM) Software
- NAICS
- Software Publishers (5132), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Security Operations Center (SOC) as a Service (BPAEADAB)
- akta.pro secondary industries
- Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG), Infrastructure & Network Monitoring (NPM/NPMD) (HDABAJAA)
Keywords
Where SGBox is headquartered
LocationHeadquarters
- HQ city
- Milan
- HQ country
- Italy
- HQ region
- Europe
Offices1 record
Markets served
SGBox business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- SIEM & SOAR Platform Licensing: Subscription-based licensing model where license cost is based on the total number of devices sending logs. This is a departure from traditional SIEM pricing which is often based on data volume or events per second (EPS). The modular approach allows customers to pay for only the capabilities they need.
- Cloud SIEM SaaS: Cloud-based SIEM offering in SaaS mode, providing flexible data storage and management with reduced costs and management efforts
- Managed Security Services (CyberTrust 365): Business unit offering managed security services including 1-tier support for evolutionary maintenance through to Managed SIEM and SOC H24 service
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Device-based licensing with unlimited data |
Go-to-market motion2 records
Distribution channels2 records
Marketing channels7 records
SGBox product offering
Product offeringCore offering
SGBox sells an all-in-one, modular and scalable SIEM and SOAR platform that collects, correlates and analyzes logs from any source to detect threats and automate security response. The platform is offered as on-premises licensed software and as cloud SaaS, with optional managed security services delivered through its CyberTrust 365 business unit. Pricing is based on the number of devices sending logs rather than data volume or events per second, with unlimited data ingestion.
Product overview
SGBox is an all-in-one, modular and scalable SIEM and SOAR platform that protects IT infrastructure from cyber threats. The platform provides centralized log collection, analysis, correlation, and monitoring across diverse data sources. The core products include SIEM and SOAR, supplemented by specialized modules including Log Management, Cloud SIEM, Cloud Log Management, User Behavior Analytics (UBA), Incident Management, Advanced Event Search, Threat Intelligence Feed, Network Vulnerability Scanner, File Integrity, Active Directory Auditor, and Event Correlation. All modules work in synergy through a simple and intuitive interface to monitor network security status and detect potential threats.
Differentiator
Problem solved
Functional benefit
Brands
- CyberTrust 365: Business unit dedicated to Managed Security Services, offering services ranging from 1-tier support for evolutionary maintenance to Managed SIEM and SOC H24 service.
Products and services
- SGBox SIEM Centralized collection, correlation and analysis of data from different sources for security monitoring and threat detection. Designed for enterprise IT and security teams in manufacturing, public administration, legal, utilities, financial, and healthcare sectors.
- SGBox SOAR Security Orchestration, Automation and Response platform that automates security processes to enable rapid and effective response to attacks. Built for enterprise security operations teams needing automated incident response.
- SGBox Cloud SIEM SIEM capabilities delivered as a cloud SaaS service, providing flexible data storage and management while reducing costs and management effort compared with on-premises deployment. Targeted at organizations wanting cloud-native SIEM.
- SGBox Cloud Log Management Cloud-based log management solution for flexible data storage and management in SaaS mode, designed to complement the SIEM platform for cloud-first environments.
- CyberTrust 365 Managed Security Services Managed security services offered through a dedicated SGBox business unit, ranging from basic 1-tier support for evolutionary maintenance to fully managed SIEM and SOC H24 services for maximum protection from cyber attacks.
Companies that use SGBox
Customer profileNamed customers11 records
Segments6 records
Ideal customer profiles5 records
SGBox technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature16 records
SGBox partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- CyberTrust 365coreCyberTrust 365 is the SGBox Business Unit dedicated to offering Managed Security Services. It provides managed services ranging from simple 1-tier support for evolutionary maintenance to Managed SIEM and SOC H24 service for maximum protection from cyber attacks.
Scale indicators1 record
Recent moves6 records
Expansion highlights6 records
SGBox competitors and assessment
Company assessmentDirect peers
- LogRhythm: LogRhythm offers a unified SIEM platform with log management, UEBA, and SOAR capabilities targeting mid-market and enterprise security operations centers. Directly comparable to SGBox in product scope, target buyer, and channel-led distribution model.
- Securonix: Securonix delivers a SIEM/SOAR platform with UEBA, threat intelligence, and cloud-native architecture. Comparable to SGBox in product breadth (detection, correlation, response) and in serving regulated, compliance-driven buyers.
- Exabeam: Exabeam provides a cloud-native SIEM and XDR platform with strong user behavior analytics (UEBA) and automated investigation features. Comparable to SGBox in combining log management, behavioral analytics, and incident response in a unified platform for mid/large enterprise SOCs.
- Elastic Security: Elastic Security combines SIEM, endpoint security, and observability on the Elastic Search platform. Comparable to SGBox in offering log management, correlation, and threat detection with a search-driven architecture for security operations teams.
- AlienVault (AT&T Cybersecurity / Fortra): AlienVault USM (now under Fortra) is an all-in-one SIEM/threat detection platform widely adopted by mid-market organizations. Comparable to SGBox in unifying SIEM, vulnerability scanning, and asset discovery in a single platform with predictable pricing.
- ManageEngine (Zoho) Log360: ManageEngine Log360 is a SIEM solution offering log management, threat intelligence, and compliance reporting, sold primarily through channel partners to mid-market and SMB customers. Comparable to SGBox in modular pricing, channel distribution, and emphasis on compliance use cases.
Broad incumbents
- Splunk Enterprise Security: Splunk is the dominant enterprise SIEM platform, with extensive SOAR, UEBA, and security analytics capabilities. Comparable to SGBox in core product category but operates at massive scale with a much broader enterprise and global footprint.
- Rapid7 InsightIDR: Rapid7 offers a broader security analytics platform spanning SIEM, vulnerability management, and incident detection/response. Comparable to SGBox in the SIEM and SOAR overlap, though Rapid7 serves a wider portfolio across the security value chain.
- IBM QRadar SIEM: IBM QRadar is a long-established enterprise SIEM platform with strong compliance, threat intelligence, and incident response capabilities. Overlaps significantly with SGBox's product scope but is positioned as part of IBM's broader security portfolio for large enterprises.
Emerging players
- Wazuh: Wazuh is an open-source SIEM/XDR platform with log management, file integrity monitoring, and vulnerability detection capabilities. Comparable to SGBox in several core modules (FIM, vulnerability scanning, log collection) and in serving compliance-driven buyers, though with a different commercial model.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
SGBox social profiles
Digital presenceSGBox financial estimates
Financial estimateRevenue estimate
Valuation estimate
SGBox leadership team
Management profileNumber of profiles
SGBox subsidiaries and ownership
Company hierarchySubsidiaries1 record
SGBox funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
SGBox M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about SGBox
What does SGBox do?
SGBox sells an all-in-one, modular and scalable SIEM and SOAR platform that collects, correlates and analyzes logs from any source to detect threats and automate security response. The platform is offered as on-premises licensed software and as cloud SaaS, with optional managed security services delivered through its CyberTrust 365 business unit. Pricing is based on the number of devices sending logs rather than data volume or events per second, with unlimited data ingestion.
Is SGBox a public or private company?
SGBox is a private company. It is classified as unknown and is currently operating.
When was SGBox founded?
SGBox was founded in 2009. It employs 11 to 50 people.
Where is SGBox based?
SGBox is headquartered in Milan, Italy, in the Europe region.
How does SGBox make money?
Three revenue lines are on record. SIEM & SOAR Platform Licensing is the primary driver. The others are cloud SIEM SaaS and managed Security Services (CyberTrust 365).
Who are SGBox's main competitors?
Direct peers on record are LogRhythm, Securonix, Exabeam, Elastic Security, AlienVault (AT&T Cybersecurity / Fortra) and ManageEngine (Zoho) Log360. Broad incumbents are Splunk Enterprise Security, Rapid7 InsightIDR and IBM QRadar SIEM. Wazuh is listed as an emerging player.
Does SGBox have an API?
No public API is recorded for SGBox.
What industry is SGBox in?
SGBox's product category is Security Information and Event Management (SIEM) Software. Its primary akta.pro industry code is BPAEADAB, Security Operations Center (SOC) as a Service, with a secondary code of BPAEAMAG, Cybersecurity Operations Outsourcing (SOC / SecOps). Its NAICS code is 5132 and its SIC code is 7372.