You run your own SIEM instead of buying a managed service because the maths worked. Licences, one engineer, a screen that stays green. That saving is real and it shows up on your P&L every month.
Source: [Dev.to](https://dev.to/xuxu298/your-siem-has-never-been-asked-a-question-it-could-fail-56d0)