The short answer
A charge from DATADOG* SECURITY SIEM corresponds to Cloud SIEM threat detection, Cloud Security Management (CSM), or Application Security monitoring from Datadog, Inc.
Why it shows up like this
A billing entry showing DATADOG* SECURITY SIEM represents charges for a Datadog Cloud SIEM & Security Platform Subscription, provided by Datadog, Inc. Datadog is an enterprise observability and cybersecurity vendor that helps engineering teams monitor infrastructure performance and investigate security threats. Statement descriptors like DATADOG* SECURITY SIEM, DATADOG INC, or DATADOG NYC appear when a company card is linked to a Datadog organization account that enabled security telemetry.
This specific charge occurs because Datadog meters Cloud SIEM based on the volume of security logs analyzed by its detection engine. The platform charges roughly $0.20 per gigabyte of analyzed data, alongside any add-on fees for Cloud Security Management or workload protection. If a DevOps engineer or security analyst routes high-volume AWS CloudTrail streams or Okta authentication events into Datadog, billing can escalate quickly at the end of the monthly billing cycle.
To review the itemized breakdown or adjust log ingest rules, an account administrator should log in at app.datadoghq.com and navigate to Organization Settings followed by Plan & Usage. From that dashboard, your team can modify log forwarding pipelines or adjust security indexing limits to prevent future overages. Datadog treats analyzed usage as non-refundable once processed, making active pipeline management essential.
Don’t recognize it? Common scenarios
- A security or compliance team activated Cloud SIEM or CSM Workload Security on an existing Datadog organization.
- High-volume AWS CloudTrail, Okta, or VPC Flow logs were routed to the Datadog security indexing pipeline.
- An ongoing enterprise security contract renewed automatically.
How to locate the invoice and cancel
- Log in to Datadog Web App Open app.datadoghq.com and log in with your administrator account.
- Inspect Plan & Usage review to Organization Settings > Plan & Usage to view an itemized breakdown of Cloud SIEM and Security products.
- Disable Security Log Forwarding Disable security detection rules or log forwarding pipelines to stop recurring analysis fees.
Frequently Asked Questions
How does Datadog Cloud SIEM charge for log analysis?
Datadog Cloud SIEM charges $0.20 per GB of analyzed security logs (or committed tier rates) separate from standard log retention indexing fees.
Are Datadog security charges refundable?
Datadog usage fees and committed licenses are non-refundable. Disabling log routing stops future charges.
Dispute Rights & Fraud Prevention
If your company card was billed unexpectedly and your IT or security team has no record of enabling Datadog Cloud SIEM, reach out to Datadog support to audit the active account. You may also contact your corporate card provider to dispute unauthorized vendor charges if the billing was fraudulent.
Independent reference — not affiliated with Datadog, Inc.. Billing names and policies change; verify with the merchant or your bank before acting.
Verified sources
Every claim on this page is checked against official sources — open them to confirm before you call your bank.
- Datadog Cloud SIEM & Security Pricing Documentation https://www.datadoghq.com
- CFPB: Disputing Unrecognized Charges https://www.consumerfinance.gov
Reviewed Aug 15, 2026 · high · About UnknownCharges