# Sumo Logic Financial Model

Cloud-based SaaS IT log analytics and security information management (SIEM) platform.

- Canonical: https://finamodel.com/startups/sumo-logic
- Excel download: https://finamodel.com/startup-models/sumo-logic.xlsx
- Category: Enterprise/Security
- Model type: SaaS ARR / Valuation
- Funding round: Seed
- Funding: $25M
- Founded: 2020
- Geography: North American focus implied (Forrester survey cites NA + European market); HQ unstated.
- Customer: B2B

## About the company

Sumo Logic provides cloud log analytics and security information and event management software for IT and security teams. The platform helps customers analyse operational and security data in the cloud rather than relying on a traditional on-premise log-management workflow.

Its subscription model includes tiered usage pricing, so account value can grow with data ingestion and platform adoption. The available research describes a Series A-stage, pre-revenue company at deck date, which argues for transparent commercial assumptions rather than implied historical scale.

The model combines an ARR cohort build with a separate log-volume pricing layer. New logos, usage tiers, expansion, churn, cloud COGS, sales capacity, gross margin, product investment, and overhead determine revenue, burn, and cash needs.

## What's included

- 5-year monthly revenue build with stage-appropriate growth assumptions
- Full P&L, headcount plan, and operating-expense schedule
- Cash-flow statement, runway, and burn-rate tracking
- Valuation via exit multiple with a DCF cross-check
- Returns analysis with MOIC and IRR
- Unit economics including CAC, LTV, payback, and cohort retention

## Product & value proposition

Cloud-delivered service that collects, parses, correlates, and analyzes IT logs from networks, systems, and applications. Six differentiators vs. on-premise incumbents:
1. Cloud-based service - no on-premise hardware, instant delivery, seamless upgrades.
2. Seamless scalability - distributed store + elastic compute; handles 100 EPS to 10,000 EPS without data fragmentation.
3. Machine-driven log parsing - automated structure inference; custom/application logs useful immediately.
4. Context modeling - identities, network elements, services; enables business-impact correlation.
5. Global IT log intelligence - cross-customer data mining; zero-day threat discovery, shared defense.
6. Built-in community - frictionless sharing of analytics content; platform ambition ("Service → Platform").

Target market: Medium enterprises, large enterprise departments, large enterprises. Use cases span Compliance (PCI, SOX, HIPAA, NERC), Security (incident response, threat intelligence, data protection), and Operations (troubleshooting, business continuity, service levels).

## Market

- TAM: ~$2.5B, split:
  - Security Information Management (SIM): $1.1B - ArcSight, EMC/RSA, Cisco, Splunk, Symantec, Q1 Labs, LogLogic
  - Event Correlation & Analysis: $1.4B - Tivoli, BMC, CA, HP, Microsoft, Quest
  - Source: Gartner/Dataquest
- Key demand drivers: Compliance (32%), Incident investigation (21%), Log management (13%) per Forrester Q3 2008 survey of 1,335 NA/European enterprise security decision-makers

## Revenue model

Tiered subscription priced at **80% gross margin** target. Pricing unit = Events/Sec + GB/Day data ingestion:

| Tier | Events/Sec | GB/Day | COGS $/Mo | MRR* | ACV* |
| --------- | ---------- | ------- | ---------- | --------- | ---------- |
| Trial | 5 | 0.5 | $5 | - | - |
| Silver | 120 | 10 | $101 | $506 | $6,072 |
| Gold | 1,200 | 100 | $1,012 | $5,063 | $60,756 |
| Platinum | 3,000 | 250 | $2,531 | $12,656 | $151,872 |
| Diamond | 12,000 | 1,000 | $10,125 | $50,625 | $607,500 |

*Priced at 80% gross margin

Go-to-market channels: self-serve / freemium trial, web sales, telesales, focused direct touch, channel partnerships, PaaS add-on sale. Strategy: low-friction "value before commit."

Competitive reference ACVs from deck:
- AlertLogic: Trial tier $2,148 ACV; Silver $36,000; Gold $153,000; Platinum $324,000
- ArcSight deal sizes: Silver-equivalent $100–500k; Gold $0.5–2M; Platinum $2–6M

## Traction & metrics

- Gross margin target explicitly stated: 80%.
- Scalability claim: 100 EPS to 10,000 EPS without tradeoffs.

## Unit economics

- Gross margin: 80% target; COGS components are Network (inbound-dominated), Storage (monthly retention charge), CPU (elasticity-optimizable).
- Implied MRR/COGS ratios from table (confirm 80% GM):
  - Silver: $506 MRR / $101 COGS = ~80% GM ✓
  - Gold: $5,063 / $1,012 = ~80% GM ✓
  - Diamond: $50,625 / $10,125 = ~80% GM ✓

## Competition / moat

Direct competitors and their weaknesses:
- **ArcSight**: enterprise software + appliances; RDBMS limits, data fragmentation, one schema/parse-at-collection, limited context model, no cross-customer intelligence.
- **LogLogic**: appliance-based; same RDBMS and fragmentation issues, limited device support, no context model.
- **Splunk**: downloadable software; full-text index only, costly repeated parsing, no context model, no cross-customer intelligence.
- **Alert Logic**: SaaS + appliance hybrid; schema-per-device, limited context model, some SOC service but no shared intelligence.

Moat claimed: proprietary machine-driven log parsing, global cross-customer intelligence layer, built-in community, elastic cloud architecture. Patent portfolio: 4 granted patents (2 per founder), 9 patent applications in process.

## Team & funding ask / use of funds

**Founders**:
- Christian Beedgen - ArcSight Chief Architect / Director of Engineering since 2001; led ESM server team (20 people); Amazon, Gigaton, Cleverlearn background; 2 granted patents, 7 applications.
- Kumar Saurabh - Data Architect at Mint.com (built Mint's data infrastructure solo); ArcSight Director of Engineering 2001–2008 (Analytics & Solutions, 12 people); 2 granted patents, 2 applications.

Team noted as "to be completed".

---

## Recommended financial model

- **Archetype + why**: SaaS ARR / subscription model with usage-based tiering. Revenue is driven by customer count per tier × ACV. The deck provides explicit tier pricing and COGS structure at a defined 80% gross margin, making a tiered ARR build-up the natural framework. No transactional or marketplace revenue is indicated.

- **Forecast horizon & granularity**: 5 years; monthly for Years 1–2 (customer ramp, trial conversions), quarterly for Years 3–5. Series A stage demands granular early-period cash-flow visibility.

- **Key drivers & assumptions**:
  - New customers/month by tier (Trial, Silver, Gold, Platinum, Diamond)
  - Trial-to-paid conversion rate
  - Tier upgrade rate (Silver → Gold → Platinum)
  - Gross churn rate
  - Average ACV per tier
  - Gross margin: 80%; COGS scales with GB/Day per tier
  - COGS per tier $/month
  - Headcount ramp (S&M, R&D, G&A)
  - CAC (Sales & Marketing spend ÷ new logos)
  - R&D spend as % of revenue
  - G&A

- **Scenarios (Base / Bull / Bear - which variables flex)**:
  - **Base**: Moderate ramp (5–10 new paid customers/month by Month 12), mix skewed Silver/Gold, 80% GM, 12% annual churn.
  - **Bull**: Faster enterprise wins (Gold/Platinum dominant), PaaS channel adds customers, lower churn (8%), tier upgrades accelerate.
  - **Bear**: Slow conversion (trial-heavy), Splunk/ArcSight defend market, higher CAC, churn 18%, GM pressure if storage costs exceed plan.

- **Required sheets / outputs**:
  1. Assumptions - all drivers with toggle (Base/Bull/Bear)
  2. Customer Build - monthly cohort by tier; new, churned, ending count
  3. Revenue - MRR / ARR by tier; blended ACV
  4. COGS - by component (network/storage/CPU) by tier
  5. Gross Profit
  6. OpEx - headcount (S&M, R&D, G&A) + non-headcount
  7. P&L (Income Statement) - monthly → annual summary
  8. Cash Flow - simplified; Series A burn and runway
  9. Unit Economics - LTV, CAC, LTV/CAC, payback period (once CAC assumptions set)
  10. Dashboard - ARR, MRR, GM%, burn, runway, customer count KPIs

## Frequently asked questions

### Is the Sumo Logic financial model free?

Yes. The Sumo Logic model is a free Excel download with live formulas.

### Can I change the assumptions?

Yes. The workbook is editable and its live formulas recalculate when assumptions change.