Pure SecurityLog Retention Vault
Keep logs for exactly as long as each rule demands, per source, when your SOC cannot.
From US$1,080 / year, billed annually
The problem Log Retention Vault solves
Your SOC keeps logs for one duration, usually twelve months. The regulator wants three years of network logs and seven of identity records. Paying your SOC to hold everything longer is expensive when what you really need is a safe copy that answers an evidence request.
How Log Retention Vault fixes it
The Vault is a secure offline archive, not another console to search. Logs arrive over an encrypted, authenticated channel and are sealed nightly into encrypted, duplicated storage, each source kept for exactly its required duration. There is no querying or indexing, by design: the Vault exists to produce evidence by exact date, at a price your SOC cannot match.
Everything Log Retention Vault does
Every capability, what it does, and the sizes it is included at.
01
Retained log volume covered by the tier
Log retention is priced on the volume you keep because that is what it costs. The tier covers a stated retained volume with clear overage pricing when the estate grows, so the bill is predictable and nobody meets a surprise.
02
Per-source retention durations
Different logs carry different rules: a firewall log and a database log answer to different obligations. Set the retention period per source and Beacon applies exactly what you set, so retention matches the requirement instead of one blunt default.
03
Encrypted collection over authenticated channels
Log evidence is worthless if it can be altered on the way in. Logs move encrypted over authenticated channels from source to vault, so what arrives is what left, every time.
04
Sealed nightly, encrypted and duplicated
The nightly seal is where logs become evidence. Each day's logs are sealed into an encrypted, duplicated, immutable object, and the seal is the integrity proof a regulator asks for when the question is whether the logs were touched.
05
Retrieval by exact date†
Retention without precise retrieval is just storage. Ask for the logs of the 14th of March and get the logs of the 14th of March, byte for byte, so answering what happened that day is a request rather than a project.
06
Chain of custody (content hashes)
Evidence that cannot prove its own integrity is evidence that will be challenged. Every sealed object is content-hashed and the chain of custody is preserved end to end, so the vault's contents stand on their own in an audit or an investigation.
07
Legal hold on any source
Legal matters do not respect retention schedules. Place a legal hold on any source and retention stops counting: the logs are kept beyond schedule until the hold is released, so an investigation never finds the window already expired.
08
The forwarding appliance (collects, buffers, ships)
Log trails break when the network does. The collector gathers, buffers, and ships logs to the vault, keeping the trail intact through outages, so the record is continuous even when the infrastructure underneath it is not.
Log Retention Vault pricing: what each size includes
Common questions about Log Retention Vault
See Log Retention Vault with your own framework
Book a demo and we will walk your real questions and your real evidence through Beacon.