Skip to content
SPECIFICTION
Get listed

Tenzir

tenzir.com

Free plan WebmacOSLinuxAPISelf-hosted
Visit tenzir.com
Spec score 7.4 #22 of 28 in Telemetry Pipeline Software

What it is

Tenzir is a data pipeline engine for security teams collecting, transforming, enriching, and routing telemetry. Its stages cover collection, parsing, shaping, normalization, optimization, protection, enrichment, analysis, detection, storage, search, routing, and replay. Vendor fields can be mapped to OCSF, ASIM, ECS, CIM, UDM, or a custom schema. Pipelines may drop unqueried data and deduplicate repeated events to reduce storage and analyst noise. Protect supports encryption, pseudonymization, anonymization, masking, salted hashes, redaction, and field dropping. The integrations directory lists 173 integrations, including Amazon S3, Amazon Security Lake, Amazon SQS, Azure Blob Storage, Azure Event Hubs, and ArcSight. Nodes run in the customer environment; Community and Enterprise platforms are hosted by Tenzir in AWS in Europe. Sovereign supports self-hosting and fully air-gapped deployments. Community costs nothing.

Spec sheet

What it does
Tenzir is a data pipeline engine for security teams to collect, transform, enrich, and route security telemetry.Read 4 Oct 2026 · tenzir.com
Intended users
The pricing page describes Community for home labbers, researchers, and curious data hackers, Enterprise for enterprises and service partners, and Sovereign for on-premises needs and service providers.Read 4 Oct 2026 · tenzir.com
Deployment
Tenzir nodes run in the customer's environment, while the Community and Enterprise platforms are hosted by Tenzir in AWS in Europe; Sovereign allows platform self-hosting.Read 4 Oct 2026 · tenzir.com
Integrations
The integrations directory lists 173 integrations and marks them as available or planned.Read 4 Oct 2026 · tenzir.com
Support
Community includes community support, Enterprise includes 24x7 support and SLAs, and Sovereign includes dedicated support.Read 4 Oct 2026 · tenzir.com
Maker
The maker is Tenzir GmbH, registered in Hamburg, Germany.Read 4 Oct 2026 · tenzir.com
Air-gapped use
The Sovereign Edition supports fully air-gapped environments.Read 4 Oct 2026 · tenzir.com
Data protection
The Protect building block supports encryption, pseudonymization, anonymization, masking, salted hashes, redaction, and dropping fields.Read 4 Oct 2026 · tenzir.com
Data reduction
Pipelines can drop unqueried data and deduplicate repeated events to reduce storage cost and analyst noise.Read 4 Oct 2026 · tenzir.com
Integration examples
Available integrations include Amazon S3, Amazon Security Lake, Amazon SQS, Azure Blob Storage, Azure Event Hubs, and ArcSight.Read 4 Oct 2026 · tenzir.com
Normalization
Tenzir can map vendor fields into OCSF, ASIM, ECS, CIM, UDM, or a custom schema.Read 4 Oct 2026 · tenzir.com
Pipeline stages
Its building blocks include collection, parsing, shaping, normalization, optimization, protection, enrichment, analysis, detection, storage, search, routing, and replay.Read 4 Oct 2026 · tenzir.com
Security controls
Enterprise includes external secrets, role-based access control, and audit logs; Sovereign adds a custom identity provider and self-hosted platform.Read 4 Oct 2026 · tenzir.com

Plans and prices

Community Free 1 TB/day ingress · 1 TB edge storage · Platform API · Community Support Read 4 Oct 2026 · tenzir.com
Enterprise Priced on request Licensed ingress volume · Unlimited edge storage · 1 organization · Unlimited workspaces · Durable pipeline execution · High availability · RBAC · Audit logs · 24x7 support & SLAs Read 4 Oct 2026 · tenzir.com
Sovereign Priced on request Licensed ingress volume · Unlimited edge storage · Unlimited organizations and workspaces · Self-hosted platform, including air-gapped deployments · Dedicated support · Custom identity provider Read 4 Oct 2026 · tenzir.com

Every Tenzir plan and price →

Strong points and limits

Strong points

  • Maps fields to several security schemas
  • Drops unqueried and duplicate events
  • 173 integrations listed
  • Protect supports multiple privacy controls
  • Sovereign supports air-gapped self-hosting

Limits

  • Enterprise price not listed
  • Sovereign price not listed
  • Community limited to 1 TB/day ingress
  • Community support is community-based

Who it suits

Community is described for home labbers, researchers, and curious data hackers. Enterprise targets enterprises and service partners, while Sovereign suits on-premises, service-provider, and air-gapped requirements.

Verdict

Tenzir provides a broad pipeline vocabulary, schema normalization, data reduction, protection controls, and many integrations. Choose among Community, Enterprise, and Sovereign based on hosting, support, ingress, and self-hosting requirements.

Where Specifiction places it

Alternatives to TenzirAll alternatives →