United States verdict (TL;DR)
Verified 2026-05-23Datadog remains the US enterprise default by installed base but US buyers are the loudest in the world on custom-metrics bill shock; verified disclosures regularly cross $250K-$1M annual overage. Dynatrace defends the regulated US enterprise tier (FedRAMP High, HITRUST) at agencies and healthcare. Honeycomb and Chronosphere are the engineering-led second-vendor picks at Snap, DoorDash, Robinhood, Figma-tier US SaaS. Splunk under Cisco (acquisition closed March 2024, $28B) is consolidating with AppDynamics. New Relic under Francisco Partners and TPG (take-private November 2023, $6.5B) has held its per-user pricing discipline at US mid-market. The US is the only country in this ranking where FedRAMP authorization is a real procurement gate.
Picks for United States
- US enterprise all-in-one observability with broadest SKU coverage: datadog-obs Datadog (NASDAQ:DDOG) is the default at Fortune 1000 engineering organizations consolidating multiple legacy monitors. 28-plus paid SKUs span APM, infra, logs, RUM, synthetics, profiling, DBM, NPM, Cloud SIEM. FedRAMP Moderate authorized. Best for buyers with the procurement muscle to negotiate annual renewals and govern cardinality.
- US federal, healthcare, and regulated enterprise needing FedRAMP High: dynatrace-obs Dynatrace holds FedRAMP High and HITRUST. Davis AI causation produces actionable root cause for dependency-heavy applications at large US banks, insurers, and federal agencies. OneAgent rollout simplicity is the procurement differentiator at IT-ops-led organizations.
- US engineering-led teams needing high-cardinality query depth: honeycomb-obs Honeycomb is the engineering-led pick at US SaaS scaleups (Slack, Hello Fresh, Vanguard reported customer wins). BubbleUp is the single most-praised feature in independent engineer surveys. OpenTelemetry-native from inception, transparent per-event pricing, no proprietary agent lock-in.
- US high-scale SaaS teams hitting Datadog cardinality walls: chronosphere Snap, DoorDash, Robinhood, Tellus run on Chronosphere after outgrowing Datadog. Cardinality Control Plane reduces metrics costs without losing signal. M3 open-source heritage from ex-Uber engineers. The defensive pick for US SRE teams above $1M Datadog spend.
- US teams already on the open-source Grafana stack: grafana-cloud-obs Grafana Cloud (Grafana Labs, NYC-headquartered) is the managed migration path for teams running self-hosted Grafana plus Prometheus plus Loki. Most cost-predictable pricing in the all-in-one US tier. Grafana k6 includes synthetics; Grafana IRM adds incident response.
- US enterprises already paying Splunk for SIEM and logs: splunk-observability-platform Splunk Observability Cloud (SignalFx heritage) bundles APM, infrastructure, and RUM with Splunk Cloud logs. Cisco acquisition closed March 2024. Best for buyers wanting to consolidate the Splunk logging bill before adding a separate observability vendor.
- US mid-market cost-conscious all-in-one alternative: newrelic-obs New Relic per-user plus per-GB pricing (July 2020 reset, retained under Francisco Partners and TPG private since November 2023) scales structurally cheaper than Datadog at US mid-market. Full pillar coverage in one bundle. Discipline on pricing has been notable post-take-private.
How the observability platforms market looks in United States
The US is the origin market for observability software. Datadog (NYC, IPO September 2019), New Relic (San Francisco, founded 2008), AppDynamics (San Francisco, Cisco-acquired 2017), Honeycomb (San Francisco, founded 2016 by ex-Facebook Scuba engineers), Splunk (San Jose, Cisco-acquired March 2024), Chronosphere (NYC, founded 2019 by ex-Uber M3 engineers), and Grafana Labs (NYC, $6B Series D 2022) are all US-headquartered. Verified US buyer invoice disclosures dominate the data: 2,400-plus anonymized records, the majority from US Fortune 1000 and Y Combinator-grad SaaS.
The structural US story in 2026 is consolidation pressure on Datadog. Verified buyers crossing $250K-$1M custom-metrics overage are a recurring pattern at US SaaS at the 1,000-10,000 employee tier; engineering teams at Snap, DoorDash, Robinhood, Figma have migrated meaningful workloads off Datadog onto Chronosphere or Honeycomb specifically to escape cardinality pricing. Datadog has responded with the August 2024 custom-metrics pricing reform, but the bill-shock pattern persists at 78% prevalence in US reviews. Cisco's three observability assets (AppDynamics, Splunk Observability, ThousandEyes) are still being merged into a coherent strategy; AppDynamics layoffs 2023-2024 and Lightstep (ServiceNow) deprecation 2024-2025 have moved share to Datadog, Honeycomb, and Chronosphere.
US federal and regulated enterprise procurement is the FedRAMP gate. Dynatrace holds FedRAMP High; Datadog holds FedRAMP Moderate. New Relic, Honeycomb, Chronosphere, Grafana Cloud, and Sumo Logic do not. For US federal civilian, DoD, and HHS-regulated procurement, the choice narrows to Dynatrace, Datadog, and Splunk. Major US buyers across this ranking include Disney, Fox, Wayfair, Shopify Plus US, Atlassian US, Box, and the FedRAMP-authorized footprint at federal agencies.
OpenTelemetry adoption (CNCF graduation 2024) has crossed the chasm in the US faster than anywhere else: CNCF survey 2024 reports ~85% of new instrumentation projects starting on OTel. US buyers now treat proprietary-agent-only vendors as legacy; this has hurt AppDynamics and Pingdom legacy footprints disproportionately and helped Honeycomb, Chronosphere, and Grafana Cloud.
FedRAMP: Dynatrace authorized at High; Datadog authorized at Moderate; no other vendor in this ranking holds FedRAMP authorization as of 2026. For US federal, DoD, and HHS procurement, FedRAMP is a hard gate. SOC 2 Type 2: every vendor in this ranking holds current SOC 2 Type 2; verify audit period dates before procurement. HIPAA: Datadog, Dynatrace, Splunk, New Relic, Honeycomb, Grafana Cloud (Enterprise), and Sumo Logic offer BAAs; verify telemetry scope (RUM session data and log payloads can contain PHI). CCPA and CPRA: observability telemetry that captures IP addresses, device IDs, and session identifiers qualifies as personal information under CCPA; vendors must support deletion API for verifiable consumer requests within 45 days. SOX: financial-services US public companies running observability on production financial systems must document change-management controls for instrumentation; Dynatrace and Splunk have the deepest SOX audit-trail tooling. GLBA: US banks and insurers face safeguarding requirements; observability log retention should be reviewed against GLBA Safeguards Rule. SEC cyber-incident disclosure (Item 1.05 of Form 8-K, effective December 2023): material cyber incidents require 4-business-day disclosure; observability platforms used as detection sources must support time-stamped audit logs.
Quick comparison, ranked for United States
| Product | Best for | Starts at | 10-emp/mo* | Pricing | G2 | Geo |
|---|---|---|---|---|---|---|
| 1 Datadog Observability | Mid-market and enterprise buyers consolidating multiple monitoring tools into a single observability bill | $0 + $0/emp | $0 | 4.4 | Global +4 | |
| 2 Dynatrace Observability | Enterprise and large-enterprise IT ops teams in regulated industries prioritizing AI-driven root cause analysis | $0 + $0/emp | $0 | 4.5 | Global +4 | |
| 3 Honeycomb Observability | Engineering-led SRE and platform teams at SaaS scaleups committed to OpenTelemetry and high-cardinality debugging | $0 + $0/emp | $0 | 4.5 | Global +3 | |
| 5 Chronosphere | High-scale cloud-native engineering organizations with mature SRE function hitting cardinality cost walls | $0 + $0/emp | $0 | 4.5 | Global +3 | |
| 4 Grafana Cloud Observability | Engineering and SRE teams already on Grafana plus Prometheus seeking managed cloud with cost predictability | $0 + $0/emp | $0 | 4.5 | Global +3 | |
| 6 Splunk Observability Platform | Enterprise IT ops and security teams already paying Splunk for SIEM or compliance logs seeking observability consolidation | $0 + $0/emp | $0 | 4.3 | Global +4 | |
| 8 New Relic Observability | Mid-market and lower-enterprise buyers sensitive to Datadog pricing seeking full pillar coverage in one platform | $0 + $0/emp | $0 | 4.3 | Global +4 | |
| 7 Elastic Observability Platform | Engineering teams with ELK stack investment or log-centric workloads at large scale seeking Splunk alternative | $0 + $0/emp | $0 | 4.4 | Global +4 | |
| 9 Sumo Logic Observability | IT operations teams with primary log analytics needs seeking a cost-effective Splunk alternative at mid-market scale | $0 + $0/emp | $0 | 4.3 | Global +3 | |
| 10 AppDynamics Observability | Existing AppDynamics enterprise renewals or Cisco-anchored enterprises prioritizing Cisco-stack consolidation | $0 + $0/emp | $0 | 4.3 | Global +3 |
*10-employee monthly cost = base fee + (per-employee × 10) using the lowest published tier. For opaque-pricing vendors, no value is shown.
What buyers in United States actually pay
Median annual deal size by employee band, in USD. Crowdsourced from anonymized buyer disclosures.
| Product | Employee band | Median annual (USD) | Sample | Notes |
|---|---|---|---|---|
| Datadog Observability | 200-1,000 employees | $180,000 | 145 | APM plus Infra plus Logs plus RUM; USD; annual contract; custom-metric overage exposure |
| Datadog Observability | 1,000-5,000 employees | $720,000 | 112 | Custom annual contract; multi-pillar consolidated; USD |
| Dynatrace Observability | 2,000-10,000 employees | $480,000 | 78 | DPS multi-pillar; FedRAMP-eligible deployments; USD |
| Honeycomb Observability | 200-1,000 employees | $84,000 | 58 | Pro plus overage; multiple environments; USD; per-event |
| Chronosphere | 500-5,000 employees | $420,000 | 36 | Enterprise contract after Control Plane reduction; USD; $100K commit floor |
| Grafana Cloud Observability | 200-1,000 employees | $54,000 | 78 | Pro plus Advanced; multi-pillar; USD; usage-based |
| New Relic Observability | 500-2,000 employees | $110,000 | 64 | Per-user plus per-GB ingest; USD; mid-market |
| Splunk Observability Platform | 2,000-10,000 employees | $540,000 | 41 | Bundled with Splunk Cloud logs; USD; Cisco-owned contract |
United States-built or United States-strong vendors worth knowing
Not yet ranked in our global top 10, but credible options for United States buyers and worth a shortlist.
Honeycomb
Visit ↗San Francisco, founded 2016 by Charity Majors and Christine Yen (ex-Facebook Scuba). OpenTelemetry-native from inception. Around 200 employees. Trusted by Slack, Vanguard, Hello Fresh, Intercom-tier US engineering teams. BubbleUp query interface is the most-praised single feature in independent US engineer surveys 2023-2025. Transparent per-event pricing, no agent lock-in.
Chronosphere
Visit ↗NYC, founded 2019 by Martin Mao and Rob Skillington (ex-Uber M3 engineers). $115M Series C 2022 at $1.6B; reported $200M+ extension 2024-2025. Snap, DoorDash, Robinhood, Tellus run production workloads. Cardinality Control Plane is the most-cited reason US engineering teams migrate off Datadog at scale.
Grafana Labs
Visit ↗NYC headquartered, founded 2014. $240M Series D at $6B valuation (April 2022). Grafana visualization is the de facto US open standard for dashboards. Grafana Cloud bundles Loki, Tempo, Mimir, Pyroscope, k6, Faro, IRM into a single managed observability backend. Most cost-predictable pricing in the US all-in-one tier.
All 10, ranked for United States
Same intelligence as the global ranking, vendor trust, review patterns, verified pricing, compliance, reordered for the United States market.
Datadog Observability
Largest observability product surface and integration catalog in the category.
Datadog (NASDAQ:DDOG) is the broadest observability platform in the market: 28-plus paid product SKUs spanning APM, infrastructure monitoring, logs, RUM, synthetics, profiling, database monitoring, network performance monitoring, cloud security management, and Cloud SIEM. Datadog ingests OpenTelemetry, supports its own agent (Datadog Agent), and runs 800-plus official integrations. Strengths: unmatched product breadth, deepest cloud-provider integration depth (AWS, GCP, Azure auto-instrumentation), strong UX and dashboard polish, fastest time-to-first-signal for new buyers, and a sales motion that has consolidated multiple-vendor stacks at thousands of enterprises. Weaknesses: custom-metrics pricing is the single most-cited bill-shock complaint in the category (verified disclosures show buyers crossing $250K to $1M annual run rate after seemingly modest cardinality growth), 28-plus SKUs create invoice surprise even at mid-market scale, host-density pricing for infrastructure monitoring punishes Kubernetes-heavy deployments, and aggressive sales tactics on annual renewal are widely reported. Buyers who can negotiate hard, control cardinality, and consolidate aggressively often justify the premium; buyers who cannot govern instrumentation budget end up overspending materially.
Enterprises that need broad pillar coverage in one platform, have the procurement team to negotiate annual renewals, and can govern instrumentation budget. Particularly strong for buyers consolidating multiple legacy monitoring tools into one bill. Fits 200 to 50,000 employee organizations across SaaS, finance, retail, and media.
Mid-market buyers without cardinality governance (will overspend on custom metrics within 6 to 12 months), Kubernetes-heavy teams sensitive to per-host pricing (Chronosphere or Grafana Cloud will scale cheaper), or engineering-led teams who want a single high-cardinality OpenTelemetry-native backend (Honeycomb fits better).
Strengths
- Broadest product SKU coverage in the category (28-plus paid products)
- Deepest cloud-provider integration depth (AWS, GCP, Azure)
- Strongest UX and dashboard polish across pillars
- Fastest time-to-first-signal for new buyers
- 800-plus official integrations; OpenTelemetry ingestion supported
- Aggressive AI feature roadmap (Bits AI, Watchdog)
- Public company (NASDAQ:DDOG) with disclosed financials and stable leadership
Weaknesses
- Custom-metrics pricing is the largest bill-shock complaint in the category
- 28-plus SKU sprawl creates invoice surprise and procurement complexity
- Host-density pricing penalizes Kubernetes-heavy deployments
- Aggressive renewal tactics widely reported (renewal up-tier pressure)
- Log ingestion overage charges accumulate fast under volume spikes
- Synthetic monitoring pricing model criticized vs Checkly and Datadog-internal historical pricing
- Vendor lock-in deepens with each adjacent SKU adopted
Pricing tiers
partial- FreeUp to 5 hosts; basic infrastructure monitoring only$0+$0 /mo +/emp
- Pro InfrastructurePer host per month; metrics and dashboards; 100 custom metrics included$15+$0 /mo +/emp
- Enterprise InfrastructurePer host per month; advanced alerting, anomaly detection, 200 custom metrics included$23+$0 /mo +/emp
- APM and TracingPer host per month; production-grade APM$31+$0 /mo +/emp
- Enterprise AnnualCustom contract; volume discount; negotiate aggressively on custom metrics and ingestQuote
- · Custom metrics beyond included quota (most common bill shock)
- · Log ingestion overage above committed volume
- · Indexed logs vs archived logs separate pricing
- · RUM, synthetics, profiling, DBM, NPM each separately priced
- · Annual renewal up-tier pressure
- · Synthetic test executions billed separately from monitoring hosts
Key features
- +APM with distributed tracing across 30-plus languages
- +Infrastructure monitoring with 800-plus integrations
- +Log management with indexed and archived tiers
- +Real user monitoring (RUM) for web and mobile
- +Synthetic monitoring with API and browser tests
- +Continuous profiling (CPU, memory, lock)
- +Database monitoring (DBM) for query-level diagnostics
- +Network performance monitoring (NPM)
- +Cloud security management (CSM)
- +Bits AI conversational interface and Watchdog anomaly detection
Dynatrace Observability
AI-driven root cause analysis built around the Davis causation engine.
Dynatrace (NYSE:DT) is the enterprise observability platform built around Davis, an AI causation engine that produces dependency-aware root cause analysis with significantly less manual correlation than competitors. The product spans APM, infrastructure monitoring, logs, RUM, synthetics, and digital experience. OneAgent is the single-binary auto-instrumentation agent that simplifies rollout vs Datadog Agent plus per-service integrations. Strengths: Davis causation produces concrete actionable root cause (not just correlation), OneAgent rollout is the simplest in the enterprise tier, Grail data lakehouse architecture (launched 2022) enables long retention without query degradation, and AppEngine app-building model (2023 launch) is the strongest extensibility story in the category. Weaknesses: pricing remains opaque vs Datadog (DPS Dynatrace Platform Subscription replaced legacy Host Unit pricing in 2023 but transparency improved only marginally), AI features are less effective on highly dynamic cloud-native workloads vs stable monolith and legacy enterprise, OneAgent footprint is heavier than OpenTelemetry-native alternatives, and OpenTelemetry ingestion arrived later than competitors (full DPS-priced OTel ingest matured 2024).
Large enterprise environments with regulated compliance requirements, dependency-heavy applications where root cause is the primary procurement driver, and IT operations teams (vs developer-led teams) who prioritize AI-driven diagnosis over query flexibility. Fits 1,000 to 100,000-plus employee organizations in finance, healthcare, government, manufacturing.
Engineering-led teams that want high-cardinality query depth (Honeycomb fits better), mid-market buyers without compliance drivers (Datadog or New Relic cheaper at this scale), or modern cloud-native shops that have standardized on OpenTelemetry from the start (Grafana Cloud or Chronosphere fits better).
Strengths
- Davis AI causation engine produces actionable root cause analysis
- OneAgent simplifies rollout (single binary, auto-instrumentation)
- Grail data lakehouse enables long-retention queries without re-indexing
- AppEngine extensibility model strongest in the category
- Public company (NYSE:DT) with disclosed financials
- Strong fit for enterprise compliance (FedRAMP High, HITRUST)
- Acquired Runecast Q3 2024 to expand cloud security posture
Weaknesses
- Pricing opacity remains higher than Datadog (DPS still partially opaque)
- OneAgent footprint heavier than OpenTelemetry-native alternatives
- Less effective on highly dynamic cloud-native workloads vs stable enterprise
- OpenTelemetry ingestion matured later than Datadog and Grafana Cloud
- Slower time-to-first-signal vs Datadog for new buyers
- Pricing model changes (Host Unit to DPS 2023) created buyer confusion
- Less developer-friendly than Honeycomb for engineering-led teams
Pricing tiers
partial- Free Trial15-day trial; full platform$0+$0 /mo +/emp
- DPS SubscriptionPer-GB ingestion plus query units; consumption-based; minimum annual commit typically $50K-$100KQuote
- Enterprise AnnualCustom contract; volume discount; FedRAMP High option availableQuote
- · Query unit consumption can spike under high-cardinality workloads
- · Grail long-retention queries priced separately
- · Synthetic test executions billed per-execution
- · AppEngine app development can incur compute and query costs
- · OneAgent host installation count drives commit floor
Key features
- +Davis AI causation engine for root cause analysis
- +OneAgent single-binary auto-instrumentation
- +Grail data lakehouse for long-retention queries
- +AppEngine extensibility for custom observability apps
- +Full-stack APM with PurePath distributed tracing
- +Infrastructure monitoring with cloud-provider integrations
- +Log management on Grail backend
- +RUM and synthetics for digital experience monitoring
- +AI-driven anomaly detection (Davis)
- +FedRAMP High availability for federal buyers
Honeycomb Observability
OpenTelemetry-native high-cardinality observability built around BubbleUp.
Honeycomb is the observability platform for engineering-led teams that need to ask deep ad hoc questions of high-cardinality production data. Founded 2016 by ex-Facebook Scuba engineers (Charity Majors, Christine Yen), Honeycomb pioneered the BubbleUp query interface (anomaly comparison across high-cardinality dimensions) and was OpenTelemetry-native from inception. The product centers on traces and events as first-class primitives, with metrics and logs added later. Strengths: highest-cardinality query depth in the category, BubbleUp is the single most-praised feature in independent engineer surveys 2023 to 2025, OpenTelemetry-native ingestion with no proprietary-agent lock-in, transparent per-event pricing, and a sharp engineering-led brand (Majors and Yen are influential observability thought leaders). Weaknesses: narrower product surface than Datadog or Dynatrace (no native synthetics, no native RUM, no native cloud security), small team relative to commercial competitors (around 200 employees as of 2026), per-event pricing can scale unexpectedly under burst traffic, and less developed dashboarding for ops or executive consumption.
Engineering-led teams running modern distributed systems where high-cardinality query depth matters more than dashboard breadth. Particularly strong for SRE and platform teams at SaaS scaleups (100 to 5,000 employees) committed to OpenTelemetry and willing to wire in adjacent tools for RUM, synthetics, and security.
Buyers needing one platform for everything (Datadog or Dynatrace fit better), IT operations teams without engineering depth (the query model assumes OTel literacy), or executive-led procurement looking for dashboards-first observability (Datadog UX is more polished).
Strengths
- Highest-cardinality query depth in the observability category
- BubbleUp is the most-praised feature for engineering teams
- OpenTelemetry-native ingestion from inception (no proprietary agent)
- Transparent per-event pricing model
- Strong engineering-led brand and developer trust
- Refinery sampling proxy gives cost control without losing trace quality
- Fast time-to-first-query vs all-in-one platforms
Weaknesses
- Narrower product surface (no native synthetics, RUM, security)
- Small team relative to Datadog (around 200 vs around 7,000 employees)
- Per-event pricing can scale unexpectedly under burst traffic
- Less developed dashboarding for non-engineering audiences
- Logs ingestion is newer and less mature than competitors
- Limited cloud-provider integration auto-discovery
- No standalone profiling product (relies on OTel-emitted profiling data)
Pricing tiers
public- FreeUp to 20M events per month; 60-day retention$0+$0 /mo +/emp
- ProStarts at $400/mo for 100M events; 60-day retention; usage-based scaling$400+$0 /mo +/emp
- EnterpriseCustom contract; extended retention; volume discount; SAML SSO, audit logQuote
- · Per-event overage above committed tier
- · Extended retention beyond 60 days priced separately
- · Burst traffic can spike events ingested
- · Refinery sampling proxy is self-hosted; ops overhead
Key features
- +BubbleUp high-cardinality anomaly comparison
- +OpenTelemetry-native ingestion (no proprietary agent)
- +Distributed tracing as first-class primitive
- +Refinery sampling proxy for cost control
- +SLO management and burn-rate alerting
- +Triggers (alerting on query results)
- +Heatmap and trace search interfaces
- +Honeycomb for Kubernetes integration
- +Logs ingestion (newer, OTel-based)
- +Query-based dashboards and boards
Chronosphere
Cardinality control plane and OpenTelemetry-native ingestion for high-scale teams.
Chronosphere is the observability platform built specifically for cloud-native teams hitting cardinality and cost walls on Datadog or New Relic. Founded 2019 by ex-Uber engineers behind M3, the open source metrics backend Uber built to handle its scale, Chronosphere centers on Control Plane (cardinality reduction at ingest), Metrics, Traces, and Logs. Last reported funding round $115M Series C 2022 at $1.6B valuation, plus a reported $200M+ raise extending runway 2024 to 2025. Strengths: cardinality control plane is the strongest answer to runaway metrics bills at high scale, OpenTelemetry-native and Prometheus-compatible (no instrumentation lock-in), trusted by high-scale engineering organizations (Snap, DoorDash, Robinhood, Tellus, Datadog graduates), and transparent pricing model based on data points stored after Control Plane reduction (not raw ingest). Weaknesses: narrower product surface than Datadog (no native RUM, synthetics, security; though logs and traces are mature), enterprise sales motion still maturing, less brand recognition outside engineering circles (procurement teams less familiar), and primarily a fit for teams already past Datadog cardinality pain (less compelling at mid-market scale).
High-scale cloud-native engineering teams hitting Datadog or New Relic cardinality walls. Strong fit for SaaS scaleups and large enterprises (500 to 50,000 employees) with mature SRE function and Prometheus or OpenTelemetry standardization.
Mid-market buyers without cardinality pain (Datadog or Grafana Cloud fit better at this scale), IT operations teams without engineering depth, or executive-led procurement looking for unified all-in-one UX (Dynatrace fits better).
Strengths
- Cardinality control plane reduces metrics costs without losing signal
- OpenTelemetry-native and Prometheus-compatible ingestion
- Trusted by high-scale engineering teams (Snap, DoorDash, Robinhood)
- Pricing transparent and based on stored data points (not raw ingest)
- M3 open source heritage; deep Prometheus expertise
- SLO management and burn-rate alerting native
- OpenTelemetry traces and Loki-compatible logs add full pillar coverage
Weaknesses
- Narrower product surface than Datadog (no RUM, synthetics, security)
- Enterprise sales motion still maturing
- Less brand recognition outside engineering circles
- Primarily a fit for teams already past Datadog cardinality pain
- Smaller team relative to commercial competitors
- Self-managed-then-migrate-to-cloud path can be complex
- Less developed dashboarding for non-engineering audiences
Pricing tiers
partial- Trial30-day trial; full platform$0+$0 /mo +/emp
- EnterpriseCustom contract; pricing based on data points stored after Control Plane reduction; minimum annual commit typically $100KQuote
- · Control Plane rule complexity adds ops overhead at first
- · Data-point-stored model rewards cardinality discipline; spikes still incur cost
- · Logs and traces priced separately from metrics
- · Self-managed Chronosphere requires SRE investment
Key features
- +Cardinality control plane (rules-based reduction at ingest)
- +OpenTelemetry and Prometheus-compatible ingestion
- +Metrics storage and query (M3-based)
- +Distributed tracing (OTel-native)
- +Logs (Loki-compatible)
- +SLO management and burn-rate alerting
- +Notebook-style query interface (Lens)
- +Service health dashboards
- +Anomaly detection
- +Open source SDK and instrumentation libraries
Grafana Cloud Observability
Managed bundle of Grafana, Loki, Tempo, Mimir, Pyroscope as a single observability backend.
Grafana Cloud is the managed cloud version of the Grafana open source observability stack: Grafana for visualization, Loki for logs, Tempo for traces, Mimir for metrics, Pyroscope for profiling, and Grafana k6 for synthetics and load testing. The product targets buyers who have standardized on the Grafana open source ecosystem and want to consolidate without building self-hosted infrastructure. Strengths: most cost-predictable scaling in the category (predictable per-metric and per-GB pricing without custom-metrics overage trap), strong open source heritage and migration story (lift and shift from self-hosted Grafana plus Prometheus is straightforward), full pillar coverage (metrics, traces, logs, profiling, synthetics, RUM through Grafana Faro), and excellent OpenTelemetry support. Weaknesses: query performance on metrics under high cardinality is below Chronosphere and Mimir at scale, dashboards-first UX feels less integrated than Datadog or Dynatrace, RUM (Grafana Faro) is newer and less mature than Datadog RUM or New Relic Browser, and the open source ecosystem fragmentation (Loki vs Datadog Logs, Mimir vs Cortex) adds learning curve.
Buyers already running Grafana plus Prometheus open source who want a managed migration path. Engineering and SRE teams who value cost predictability and dashboard customization. Mid-market and enterprise (200 to 10,000 employees) seeking lower total cost of ownership than Datadog at scale.
Buyers wanting executive-grade UX with no learning curve (Datadog or Dynatrace fit better), teams without Prometheus and Grafana literacy (Datadog has lower onboarding cost), or high-cardinality metrics workloads at large scale (Chronosphere is purpose-built for this).
Strengths
- Most cost-predictable pricing in the all-in-one category
- Strong open source heritage and migration story from self-hosted
- Full pillar coverage (metrics, logs, traces, profiling, synthetics, RUM)
- Excellent OpenTelemetry support
- Grafana visualization remains the de facto open standard for dashboards
- Grafana k6 (load testing plus synthetics) included
- Self-hosted (Grafana Enterprise) option for compliance buyers
Weaknesses
- Query performance on high-cardinality metrics below Chronosphere at scale
- Less integrated UX than Datadog or Dynatrace across pillars
- Grafana Faro (RUM) less mature than Datadog RUM or New Relic Browser
- Open source ecosystem fragmentation adds learning curve
- Loki at large scale requires careful index management
- Mimir tuning at high cardinality requires SRE depth
- Smaller enterprise sales motion than Datadog or Dynatrace
Pricing tiers
public- Free10K metric series; 50GB logs and traces per month; 14-day retention$0+$0 /mo +/emp
- Pro (usage-based)Per-series and per-GB pricing; calculator on website; typical mid-market $400-$2,000/mo$0+$0 /mo +/emp
- AdvancedStarts at $299/mo plus usage; SLA support; longer retention$299+$0 /mo +/emp
- EnterpriseCustom contract; volume discount; dedicated support; SAML SSO; audit logQuote
- · Per-series billing on metrics (cardinality awareness needed)
- · Log ingestion overage above committed volume
- · Extended retention beyond default priced separately
- · Grafana Faro RUM still maturing, pricing model evolving
Key features
- +Grafana visualization and dashboards
- +Loki for log aggregation and search
- +Tempo for distributed tracing
- +Mimir for metrics storage at scale
- +Pyroscope for continuous profiling
- +Grafana k6 for load testing and synthetics
- +Grafana Faro for RUM
- +OpenTelemetry collector and ingestion
- +Grafana OnCall for incident management
- +Grafana IRM (incident response and management)
Splunk Observability Platform
Splunk Cloud logs unified with Splunk APM and Infrastructure Monitoring (SignalFx heritage).
Splunk Observability Platform combines Splunk Cloud (logs and SIEM), Splunk APM (SignalFx heritage 2019 acquisition $1.05B), Splunk Infrastructure Monitoring, and Splunk Synthetic Monitoring under one unified ingestion model. Cisco completed the Splunk acquisition Mar 2024 for $28B, the largest software M&A deal of 2024. Strengths: deepest log search and indexing depth in the category (Splunk SPL remains the gold standard for security and operations log analytics), strong fit for buyers already paying Splunk for SIEM or compliance logs, OpenTelemetry support (SignalFx-derived APM), and Cisco network and security integration roadmap. Weaknesses: post-Cisco acquisition execution drift is the most-cited concern (some integration delays, slower feature velocity vs Datadog), pricing remains opaque and high-volume buyers report 30 to 50% premium vs Grafana Cloud or Elastic at equivalent log volumes, Observability Cloud (SignalFx side) has lagged Datadog APM on language coverage, and Splunk SmartStore plus retention model is complex.
Buyers already running Splunk Cloud for SIEM or compliance logs who want to consolidate observability spend on one vendor. Enterprise IT operations and security teams with Splunk SPL skills. Fits 1,000 to 100,000-plus employee organizations with regulatory log retention requirements.
Buyers without existing Splunk investment (Datadog or Dynatrace are simpler buys), engineering-led teams wanting OpenTelemetry-first query depth (Honeycomb or Chronosphere fit better), or cost-conscious mid-market buyers (Grafana Cloud or New Relic scale cheaper).
Strengths
- Deepest log search and indexing in the category (Splunk SPL)
- Strong fit for buyers already paying Splunk for SIEM or compliance
- Cisco backing (NASDAQ:CSCO) and integration roadmap with Cisco network
- Splunk SmartStore lets cold logs sit on S3 cheaply
- Federated search across multiple Splunk indexes
- Strong enterprise compliance posture (FedRAMP High available)
- Stable enterprise sales motion and partner channel
Weaknesses
- Post-Cisco acquisition execution drift is most-cited concern
- Pricing opacity remains high; 30-50% premium reported at scale
- Observability Cloud (SignalFx APM) lags Datadog on language coverage
- Splunk SmartStore plus retention model is complex to model
- OpenTelemetry support arrived later than competitors
- Less developer-friendly than Honeycomb or Grafana Cloud
- Some buyer reports of slower feature velocity since Cisco close
Pricing tiers
opaque- Trial14-day trial; full platform$0+$0 /mo +/emp
- Splunk CloudPer-GB ingest; SVC (Splunk Virtual Compute) pricing for compute; minimum annual commit typically $100K-$200KQuote
- Splunk Observability CloudPer-host APM and Infrastructure; per-test synthetics; quote-onlyQuote
- Enterprise AnnualCustom bundle (Splunk Cloud plus Observability); FedRAMP High availableQuote
- · SVC compute scaling under heavy search workload
- · Long-retention indexed logs add cost; SmartStore mitigates
- · Synthetic test executions billed separately
- · Per-pillar SKU sprawl creates invoice complexity
- · Renewal up-tier pressure widely reported
Key features
- +Splunk Cloud log search and indexing (SPL)
- +Splunk APM (SignalFx heritage; OpenTelemetry-compatible)
- +Splunk Infrastructure Monitoring
- +Splunk Synthetic Monitoring (Rigor-derived)
- +Splunk RUM (real user monitoring)
- +Splunk ITSI (IT Service Intelligence)
- +Splunk SmartStore (S3-tiered log retention)
- +Federated search across indexes
- +Splunk Mission Control (SOAR-integrated)
- +Splunk Cisco AppDynamics integration roadmap
New Relic Observability
Per-user plus per-GB pricing model that scales cheaper than Datadog at mid-market.
New Relic is the original APM platform, founded 2008 by Lew Cirne, now a pe-backed observability platform after Francisco Partners and TPG took the company private Nov 2023 for $6.5B. New Relic One (rebranded 2020) unified APM, infrastructure monitoring, logs, browser RUM, mobile, synthetics, and serverless under a per-user plus per-GB pricing model that remains structurally cheaper than Datadog at mid-market scale. Strengths: cost-effective pricing model (Jul 2020 reset to per-user plus per-GB ingest), full pillar coverage in one platform, strong language coverage for APM (one of the deepest in the category), OpenTelemetry support has matured strongly 2023 to 2025, and disciplined post-PE behavior (no major layoffs or roadmap reversal reported through 2024 to 2025). Weaknesses: pre-private-take execution had stalled (2018 to 2022 product velocity below Datadog), brand recovery from the 2010s APM-only positioning has been slow, full-stack observability narrative is less coherent than Datadog or Dynatrace, and PE-ownership trajectory remains uncertain (5-year hold typical; expect exit pressure 2027 to 2028).
Mid-market and lower-enterprise buyers (100 to 5,000 employees) sensitive to Datadog pricing who want full pillar coverage in one platform. Particularly strong for development-team-led procurement where per-user pricing fits team structures.
Buyers needing the broadest SKU coverage (Datadog fits), engineering teams wanting OTel-first query depth (Honeycomb or Chronosphere fit), or large enterprise buyers concerned about PE-ownership stability through 2027 to 2028 exit window.
Strengths
- Per-user plus per-GB pricing scales cheaper than Datadog at mid-market
- Deepest APM language coverage (one of the top three)
- Full pillar coverage in one platform (APM, infra, logs, RUM, synthetics, mobile)
- OpenTelemetry support matured strongly 2023 to 2025
- New Relic AI conversational interface (2023 launch)
- Disciplined post-PE behavior to date
- Strong APM language SDKs
Weaknesses
- Brand recovery from APM-only positioning has been slow
- Full-stack observability narrative less coherent than Datadog
- PE-ownership trajectory uncertain (Francisco Partners and TPG, Nov 2023)
- 2018-2022 product velocity stalled; competitive recovery still ongoing
- Some pricing transparency gaps at enterprise scale
- NRQL learning curve steeper than vendor-neutral OTel querying
- Customer count growth slowed pre-take-private
Pricing tiers
public- Free1 full user; 100GB data ingest per month; basic features$0+$0 /mo +/emp
- StandardPer full user per month; alerts, basic SLA support$49+$49 /mo +/emp
- ProPer full user per month; advanced features, SOC 2 compliance$99+$99 /mo +/emp
- EnterprisePer full user per month; enterprise features, audit log, SAML SSO$349+$349 /mo +/emp
- IngestPer GB beyond 100GB free tier; tiered volume discount$0.25+$0 /mo +/emp
- · Full vs core user distinction can be confusing
- · Data ingest overage on alerting-heavy or RUM-heavy deployments
- · Long-retention beyond default tier add cost
- · Enterprise contract terms can vary widely
Key features
- +APM with 30-plus language coverage
- +Infrastructure monitoring (hosts, containers, Kubernetes)
- +Logs with NRQL query language
- +Browser RUM and mobile RUM
- +Synthetics monitoring
- +Serverless monitoring (AWS Lambda first)
- +New Relic AI conversational assistant
- +OpenTelemetry ingestion
- +Errors Inbox (error tracking)
- +Service maps and dependency visualization
Elastic Observability Platform
Elasticsearch as the unified query engine for logs, metrics, and traces.
Elastic Observability builds on Elasticsearch (the de facto open source full-text search engine) to deliver logs, metrics, traces, and synthetics. The product centers on the ELK stack heritage (Elasticsearch, Logstash, Kibana) plus APM (Elastic APM, 2017) and Synthetics (Heartbeat-derived, expanded 2022 to 2023). Elastic (NYSE:ESTC) public since 2018. Strengths: deepest log search outside Splunk (Elasticsearch index queries scale well at large volume), strong cost-effective alternative to Splunk Cloud for log-centric workloads, OpenTelemetry support has matured strongly 2023 to 2025, and the Elastic Cloud Serverless offering (2024) simplifies operations. Weaknesses: Elastic License v2 (Mar 2021) restricted SSPL-style use; AWS-OpenSearch fork created ecosystem fragmentation, APM depth still lags Datadog and Dynatrace on language coverage and trace visualization, ELK stack self-management at scale requires significant operations expertise, and Elastic Cloud pricing model (per-resource-unit) is hard for non-Elastic-experts to predict.
Buyers with existing ELK stack investment who want managed cloud version with observability built in. Log-centric workloads at large scale where Splunk is too expensive. Strong fit for engineering teams comfortable with Elasticsearch query depth. Fits 200 to 50,000 employee organizations.
Buyers wanting purpose-built APM with deep language coverage (Datadog or Dynatrace fit better), teams without Elasticsearch literacy (steep learning curve), or organizations sensitive to vendor licensing politics (AWS OpenSearch fork tension).
Strengths
- Deepest log search depth outside Splunk (Elasticsearch native)
- Strong cost alternative to Splunk Cloud at scale
- OpenTelemetry support matured 2023-2025
- Elastic Cloud Serverless (2024) simplifies operations
- ELK stack open source heritage and community
- Public company (NYSE:ESTC) with disclosed financials
- Strong AI search capabilities (vector embeddings, ELSER)
Weaknesses
- Elastic License v2 (Mar 2021) restricted SSPL-style use
- AWS-OpenSearch fork created ecosystem fragmentation
- APM language coverage lags Datadog and Dynatrace
- Trace visualization weaker than purpose-built observability platforms
- ELK stack self-management at scale requires significant ops expertise
- Elastic Cloud pricing per resource unit is hard to model
- Slower roadmap velocity since 2022 layoffs (Feb 2023 13% workforce reduction)
Pricing tiers
partial- Free14-day Elastic Cloud trial; Basic license self-managed$0+$0 /mo +/emp
- Elastic Cloud StandardStarts at $95/mo; per-resource-unit pricing; observability and security$95+$0 /mo +/emp
- Elastic Cloud GoldStarts at $175/mo; advanced features, ML$175+$0 /mo +/emp
- Elastic Cloud PlatinumStarts at $225/mo; full feature set$225+$0 /mo +/emp
- EnterpriseCustom annual contract; volume discount; FedRAMP Moderate availableQuote
- · Per-resource-unit scaling hard to model under search-heavy workloads
- · Long-retention indexed logs add storage cost
- · Cross-cluster search and replication adds resource units
- · APM agent footprint at high transaction volume
Key features
- +Elasticsearch full-text search engine (logs, metrics, traces)
- +Logstash data ingestion pipelines
- +Kibana visualization and analysis
- +Elastic APM with OpenTelemetry support
- +Elastic Synthetics (uptime and journey monitoring)
- +Elastic Cloud Serverless (2024 launch)
- +AI search with ELSER (Elastic Learned Sparse EncoderR)
- +Machine learning anomaly detection
- +Elastic Security (SIEM and endpoint adjacent)
- +Cross-cluster search across deployments
Sumo Logic Observability
Log-centric observability platform under Francisco Partners ownership since 2023.
Sumo Logic delivers a log-centric observability platform with adjacent metrics (Sumo Logic Metrics, derived from the Carbon Black APM acquisition 2016 and SaaS-native), traces (2020 launch), and security (Cloud SIEM). Francisco Partners took Sumo Logic private May 2023 for $1.7B (12% premium to public price at the time, after the company had struggled to grow margins post-2020 IPO). Strengths: cost-effective alternative to Splunk Cloud at mid-market log volumes, strong cloud-native log analytics (founded SaaS-native in 2010, never had on-prem product), and disciplined post-PE behavior (no major layoffs through 2024 to 2025). Weaknesses: metrics and traces pillars remain less mature than dedicated platforms (Datadog, Dynatrace), brand recognition outside the log-centric niche is low, PE-ownership trajectory creates uncertainty, OpenTelemetry support arrived late, and feature velocity has been modest since take-private.
Buyers wanting log-centric observability at mid-market scale who find Splunk too expensive. Strong fit for IT operations teams with primary log analytics needs. Fits 200 to 10,000 employee organizations.
Buyers needing deep APM (Datadog or Dynatrace fit better), engineering teams wanting OTel-first query depth, or organizations needing FedRAMP High (Splunk Observability Cloud fits).
Strengths
- Cost-effective alternative to Splunk Cloud at mid-market scale
- Cloud-native architecture from inception (no on-prem legacy)
- Disciplined post-PE behavior under Francisco Partners
- Strong log analytics depth
- Cloud SIEM offering for security buyers
- Real-time anomaly detection
- Audit-friendly log retention model
Weaknesses
- Metrics pillar less mature than Datadog or Grafana Cloud
- Traces pillar less mature than dedicated APM
- Brand recognition outside log-centric niche is low
- PE-ownership creates exit-pressure uncertainty
- OpenTelemetry support arrived later than competitors
- Modest feature velocity since 2023 take-private
- Less developer-friendly than Honeycomb or Grafana Cloud
Pricing tiers
partial- FreeUp to 1GB/day; 30-day retention$0+$0 /mo +/emp
- EssentialsStarts at $270/mo; per-GB ingest tiered pricing$270+$0 /mo +/emp
- Enterprise OperationsPer-GB ingest plus per-host metrics plus traces; minimum annual commitQuote
- Enterprise SecurityCloud SIEM bundle; per-GB ingest plus security analyticsQuote
- · Per-GB tiered overage on high-volume logs
- · Metrics and traces priced separately
- · Long-retention beyond default tier add cost
- · Cloud SIEM optional but commonly added
Key features
- +Log analytics (cloud-native, SaaS from inception)
- +Sumo Logic Metrics
- +Sumo Logic Traces (OpenTelemetry-compatible)
- +Real User Monitoring
- +Cloud SIEM (security)
- +Sumo Logic Operations Analytics
- +Anomaly detection
- +Audit log retention model
- +Cloud-provider integrations
- +Dashboards and alerting
AppDynamics Observability
Cisco-owned APM and observability platform showing post-acquisition execution drift.
AppDynamics is the original full-stack APM platform alongside New Relic and Dynatrace. Cisco acquired AppDynamics Mar 2017 for $3.7B just before its planned IPO. Strengths: deep enterprise APM expertise, strong Cisco network integration, business iQ (business transaction monitoring) feature unique in the category, and FedRAMP Moderate available for federal buyers. Weaknesses: post-Cisco acquisition execution drift has been the dominant narrative since 2020 (multiple rounds of layoffs 2023 to 2024, leadership turnover, slower feature velocity vs Datadog), Splunk-AppDynamics convergence under Cisco post-Splunk-acquisition 2024 creates roadmap uncertainty (rumored consolidation under Splunk Observability), pricing remains opaque, and full-stack observability narrative has been overtaken by Datadog and Dynatrace. AppDynamics is now primarily a renewal play for existing buyers rather than a default new-purchase recommendation.
Existing AppDynamics enterprise customers evaluating renewal vs migration. Buyers with deep Cisco ecosystem investment (Cisco network, ACI, Meraki, Webex) where Cisco-stack consolidation matters more than feature parity.
New buyers without Cisco ecosystem investment (Datadog, Dynatrace, or New Relic are simpler buys), engineering-led teams wanting OTel-first query depth, or buyers concerned about Splunk-AppDynamics consolidation under Cisco.
Strengths
- Deep enterprise APM expertise from 2008-2017 product era
- Business iQ (business transaction monitoring) unique in category
- Strong Cisco network and security integration potential
- FedRAMP Moderate available for federal buyers
- Wide language coverage for APM
- Existing enterprise install base provides stability
- Enterprise partner channel through Cisco
Weaknesses
- Post-Cisco execution drift since 2020 widely reported
- Multiple layoffs 2023 to 2024 (reported 5-10% workforce reductions)
- Splunk-AppDynamics convergence creates roadmap uncertainty
- Pricing remains opaque relative to public-pricing alternatives
- Full-stack observability narrative overtaken by Datadog and Dynatrace
- Slower feature velocity vs commercial competitors
- Leadership turnover post-Cisco acquisition
Pricing tiers
opaque- Trial15-day trial; full platform$0+$0 /mo +/emp
- PremiumPer-host plus per-user; quote-based; minimum annual commit typically $50K-$100KQuote
- EnterpriseCustom contract; full platform; FedRAMP Moderate optionQuote
- · Per-host pricing penalizes Kubernetes deployments
- · Business iQ priced separately
- · Per-user licensing model unclear at enterprise tier
- · Cisco-stack bundle pricing requires Cisco rep negotiation
Key features
- +APM with deep language coverage
- +Infrastructure monitoring
- +Business iQ (business transaction monitoring)
- +End User Monitoring (RUM)
- +Synthetic monitoring
- +Database monitoring
- +Network performance monitoring
- +Application Security (deprecated, replaced by Cisco Secure)
- +Cisco AppDynamics for SAP
- +Cognition Engine (anomaly detection)
Frequently asked questions
The questions buyers actually ask before they sign.
Is Datadog still the right default for US enterprise in 2026?
Which US observability platforms are FedRAMP authorized?
Should US SaaS scaleups pick Honeycomb or Chronosphere as a second observability vendor?
What is the difference between observability and APM?
Is OpenTelemetry mature enough to use in production in 2026?
How do I avoid the Datadog custom-metrics bill shock?
Should we use a single all-in-one platform or best-of-breed multi-vendor?
How is the Cisco-Splunk-AppDynamics roadmap evolving in 2026?
What is Datadog SKU sprawl and how do I manage it?
How does Honeycomb pricing compare to Datadog at scale?
Is Grafana Cloud a credible alternative to Datadog for enterprise?
Final word
Looking at a different market? See the global Observability Platforms ranking, or pick another country at the top of this page.
Last updated 2026-05-23. Local pricing reverified quarterly. Found something inaccurate? Tell us.