Why Security Teams Are Switching to On-Prem SIEM

Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense · Aug 10, 2026 · 8m · transcript

In this episode of Cybersecurity Business, Lucas and Luna look at a quiet but significant shift in enterprise security: on-premise security information and event management, or SIEM. After more than a decade of 'cloud first' messaging, a growing number of security teams are pulling their log data back in-house. Lucas walks through the math that's driving the change—data ingestion costs, egress fees, and the trade-offs between cloud scalability and on-prem control—and cites a concrete case: a mid-sized bank that cut its SIEM bill by roughly 40 percent after moving to an internal…