An MCP server for querying and indexing security detection rules from Sigma, Splunk ESCU, Elastic, KQL, Sublime, and CrowdStrike CQL repositories. Supports local installation and a hosted HTTP endpoint.
As parsed from detect.michaelhaag.org/ on 2026-11-01.
Explore the market
Prices and medians update for the tier you select.
Compare at
Security Detections MCP · Pro
$25/mo
Pro plan
Pro-MCP server median
$25
across 3 priced MCP servers
vs Pro MCP servers
0% at par
at par with Pro MCP servers
ⓘ Comparisons are same provider type (MCP server) and same buyer tier (Pro). Never across tiers.
Market density
7th pctile
4 competing vendors
Comparable listings · 30d
—
MCP servers · Pro median
$25/mo
3 priced · —–— mid 50%
Price spectrum · Pro plans · 3 of 6 providers priced · log scale · $15 → $99/mo
MCP servers◻ shaded = middle 50% · line = median (all types)large ringed dot = Security Detections MCP ($25/mo)
Products in this market
Ranked by how closely each one matches Security Detections MCP's job. Prices show each provider's Pro state; entry prices are labelled as such. Unpriced products still belong to the market.
Market = the products most similar to this one by capability; prices are median / quartiles over its priced members, separated by provider type and buyer tier.