diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 1ca395eefbb39..c84d1159655f8 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -809,7 +809,6 @@ x-pack/packages/search/shared_ui @elastic/search-kibana
 x-pack/packages/security-solution/data_table @elastic/security-threat-hunting-investigations
 x-pack/packages/security-solution/distribution_bar @elastic/kibana-cloud-security-posture
 x-pack/packages/security-solution/storybook/config @elastic/security-threat-hunting-explore
-x-pack/packages/security-solution/upselling @elastic/security-threat-hunting-explore
 x-pack/packages/security/api_key_management @elastic/kibana-security
 x-pack/packages/security/authorization_core @elastic/kibana-security
 x-pack/packages/security/authorization_core_common @elastic/kibana-security
@@ -996,6 +995,7 @@ x-pack/solutions/security/packages/ecs_data_quality_dashboard @elastic/security-
 x-pack/solutions/security/packages/features @elastic/security-threat-hunting-explore
 x-pack/solutions/security/packages/navigation @elastic/security-threat-hunting-explore
 x-pack/solutions/security/packages/side_nav @elastic/security-threat-hunting-explore
+x-pack/solutions/security/packages/upselling @elastic/security-threat-hunting-explore
 x-pack/solutions/security/plugins/ecs_data_quality_dashboard @elastic/security-threat-hunting-explore
 x-pack/test
 x-pack/test_serverless
diff --git a/package.json b/package.json
index 4dd53655b143c..bc7d4556b497d 100644
--- a/package.json
+++ b/package.json
@@ -833,7 +833,7 @@
     "@kbn/security-solution-serverless": "link:x-pack/plugins/security_solution_serverless",
     "@kbn/security-solution-side-nav": "link:x-pack/solutions/security/packages/side_nav",
     "@kbn/security-solution-storybook-config": "link:x-pack/packages/security-solution/storybook/config",
-    "@kbn/security-solution-upselling": "link:x-pack/packages/security-solution/upselling",
+    "@kbn/security-solution-upselling": "link:x-pack/solutions/security/packages/upselling",
     "@kbn/security-test-endpoints-plugin": "link:x-pack/test/security_functional/plugins/test_endpoints",
     "@kbn/security-ui-components": "link:x-pack/packages/security/ui_components",
     "@kbn/securitysolution-autocomplete": "link:packages/kbn-securitysolution-autocomplete",
diff --git a/tsconfig.base.json b/tsconfig.base.json
index ebdea93273afa..f32af6f439c8f 100644
--- a/tsconfig.base.json
+++ b/tsconfig.base.json
@@ -1640,8 +1640,8 @@
       "@kbn/security-solution-side-nav/*": ["x-pack/solutions/security/packages/side_nav/*"],
       "@kbn/security-solution-storybook-config": ["x-pack/packages/security-solution/storybook/config"],
       "@kbn/security-solution-storybook-config/*": ["x-pack/packages/security-solution/storybook/config/*"],
-      "@kbn/security-solution-upselling": ["x-pack/packages/security-solution/upselling"],
-      "@kbn/security-solution-upselling/*": ["x-pack/packages/security-solution/upselling/*"],
+      "@kbn/security-solution-upselling": ["x-pack/solutions/security/packages/upselling"],
+      "@kbn/security-solution-upselling/*": ["x-pack/solutions/security/packages/upselling/*"],
       "@kbn/security-test-endpoints-plugin": ["x-pack/test/security_functional/plugins/test_endpoints"],
       "@kbn/security-test-endpoints-plugin/*": ["x-pack/test/security_functional/plugins/test_endpoints/*"],
       "@kbn/security-ui-components": ["x-pack/packages/security/ui_components"],
diff --git a/x-pack/packages/security-solution/upselling/README.mdx b/x-pack/solutions/security/packages/upselling/README.mdx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/README.mdx
rename to x-pack/solutions/security/packages/upselling/README.mdx
diff --git a/x-pack/packages/security-solution/upselling/helpers/index.tsx b/x-pack/solutions/security/packages/upselling/helpers/index.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/helpers/index.tsx
rename to x-pack/solutions/security/packages/upselling/helpers/index.tsx
diff --git a/x-pack/packages/security-solution/upselling/images/entity_paywall.png b/x-pack/solutions/security/packages/upselling/images/entity_paywall.png
similarity index 100%
rename from x-pack/packages/security-solution/upselling/images/entity_paywall.png
rename to x-pack/solutions/security/packages/upselling/images/entity_paywall.png
diff --git a/x-pack/packages/security-solution/upselling/jest.config.js b/x-pack/solutions/security/packages/upselling/jest.config.js
similarity index 75%
rename from x-pack/packages/security-solution/upselling/jest.config.js
rename to x-pack/solutions/security/packages/upselling/jest.config.js
index 014db69e5a69d..d64e79c15976c 100644
--- a/x-pack/packages/security-solution/upselling/jest.config.js
+++ b/x-pack/solutions/security/packages/upselling/jest.config.js
@@ -7,6 +7,6 @@
 
 module.exports = {
   preset: '@kbn/test',
-  rootDir: '../../../..',
-  roots: ['<rootDir>/x-pack/packages/security-solution/upselling'],
+  rootDir: '../../../../..',
+  roots: ['<rootDir>/x-pack/solutions/security/packages/upselling'],
 };
diff --git a/x-pack/packages/security-solution/upselling/kibana.jsonc b/x-pack/solutions/security/packages/upselling/kibana.jsonc
similarity index 100%
rename from x-pack/packages/security-solution/upselling/kibana.jsonc
rename to x-pack/solutions/security/packages/upselling/kibana.jsonc
diff --git a/x-pack/packages/security-solution/upselling/messages/index.tsx b/x-pack/solutions/security/packages/upselling/messages/index.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/messages/index.tsx
rename to x-pack/solutions/security/packages/upselling/messages/index.tsx
diff --git a/x-pack/packages/security-solution/upselling/package.json b/x-pack/solutions/security/packages/upselling/package.json
similarity index 100%
rename from x-pack/packages/security-solution/upselling/package.json
rename to x-pack/solutions/security/packages/upselling/package.json
diff --git a/x-pack/packages/security-solution/upselling/pages/attack_discovery/index.test.tsx b/x-pack/solutions/security/packages/upselling/pages/attack_discovery/index.test.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/pages/attack_discovery/index.test.tsx
rename to x-pack/solutions/security/packages/upselling/pages/attack_discovery/index.test.tsx
diff --git a/x-pack/packages/security-solution/upselling/pages/attack_discovery/index.tsx b/x-pack/solutions/security/packages/upselling/pages/attack_discovery/index.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/pages/attack_discovery/index.tsx
rename to x-pack/solutions/security/packages/upselling/pages/attack_discovery/index.tsx
diff --git a/x-pack/packages/security-solution/upselling/pages/attack_discovery/page_title/index.test.tsx b/x-pack/solutions/security/packages/upselling/pages/attack_discovery/page_title/index.test.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/pages/attack_discovery/page_title/index.test.tsx
rename to x-pack/solutions/security/packages/upselling/pages/attack_discovery/page_title/index.test.tsx
diff --git a/x-pack/packages/security-solution/upselling/pages/attack_discovery/page_title/index.tsx b/x-pack/solutions/security/packages/upselling/pages/attack_discovery/page_title/index.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/pages/attack_discovery/page_title/index.tsx
rename to x-pack/solutions/security/packages/upselling/pages/attack_discovery/page_title/index.tsx
diff --git a/x-pack/packages/security-solution/upselling/pages/attack_discovery/page_title/translations.ts b/x-pack/solutions/security/packages/upselling/pages/attack_discovery/page_title/translations.ts
similarity index 100%
rename from x-pack/packages/security-solution/upselling/pages/attack_discovery/page_title/translations.ts
rename to x-pack/solutions/security/packages/upselling/pages/attack_discovery/page_title/translations.ts
diff --git a/x-pack/packages/security-solution/upselling/pages/entity_analytics.test.tsx b/x-pack/solutions/security/packages/upselling/pages/entity_analytics.test.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/pages/entity_analytics.test.tsx
rename to x-pack/solutions/security/packages/upselling/pages/entity_analytics.test.tsx
diff --git a/x-pack/packages/security-solution/upselling/pages/entity_analytics.tsx b/x-pack/solutions/security/packages/upselling/pages/entity_analytics.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/pages/entity_analytics.tsx
rename to x-pack/solutions/security/packages/upselling/pages/entity_analytics.tsx
diff --git a/x-pack/packages/security-solution/upselling/pages/translations.ts b/x-pack/solutions/security/packages/upselling/pages/translations.ts
similarity index 100%
rename from x-pack/packages/security-solution/upselling/pages/translations.ts
rename to x-pack/solutions/security/packages/upselling/pages/translations.ts
diff --git a/x-pack/packages/security-solution/upselling/sections/attack_discovery/assistant_avatar/assistant_avatar.tsx b/x-pack/solutions/security/packages/upselling/sections/attack_discovery/assistant_avatar/assistant_avatar.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/sections/attack_discovery/assistant_avatar/assistant_avatar.tsx
rename to x-pack/solutions/security/packages/upselling/sections/attack_discovery/assistant_avatar/assistant_avatar.tsx
diff --git a/x-pack/packages/security-solution/upselling/sections/attack_discovery/index.test.tsx b/x-pack/solutions/security/packages/upselling/sections/attack_discovery/index.test.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/sections/attack_discovery/index.test.tsx
rename to x-pack/solutions/security/packages/upselling/sections/attack_discovery/index.test.tsx
diff --git a/x-pack/packages/security-solution/upselling/sections/attack_discovery/index.tsx b/x-pack/solutions/security/packages/upselling/sections/attack_discovery/index.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/sections/attack_discovery/index.tsx
rename to x-pack/solutions/security/packages/upselling/sections/attack_discovery/index.tsx
diff --git a/x-pack/packages/security-solution/upselling/sections/attack_discovery/translations.ts b/x-pack/solutions/security/packages/upselling/sections/attack_discovery/translations.ts
similarity index 100%
rename from x-pack/packages/security-solution/upselling/sections/attack_discovery/translations.ts
rename to x-pack/solutions/security/packages/upselling/sections/attack_discovery/translations.ts
diff --git a/x-pack/packages/security-solution/upselling/sections/entity_analytics.tsx b/x-pack/solutions/security/packages/upselling/sections/entity_analytics.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/sections/entity_analytics.tsx
rename to x-pack/solutions/security/packages/upselling/sections/entity_analytics.tsx
diff --git a/x-pack/packages/security-solution/upselling/service/index.ts b/x-pack/solutions/security/packages/upselling/service/index.ts
similarity index 100%
rename from x-pack/packages/security-solution/upselling/service/index.ts
rename to x-pack/solutions/security/packages/upselling/service/index.ts
diff --git a/x-pack/packages/security-solution/upselling/service/types.ts b/x-pack/solutions/security/packages/upselling/service/types.ts
similarity index 100%
rename from x-pack/packages/security-solution/upselling/service/types.ts
rename to x-pack/solutions/security/packages/upselling/service/types.ts
diff --git a/x-pack/packages/security-solution/upselling/service/upselling_service.test.tsx b/x-pack/solutions/security/packages/upselling/service/upselling_service.test.tsx
similarity index 100%
rename from x-pack/packages/security-solution/upselling/service/upselling_service.test.tsx
rename to x-pack/solutions/security/packages/upselling/service/upselling_service.test.tsx
diff --git a/x-pack/packages/security-solution/upselling/service/upselling_service.ts b/x-pack/solutions/security/packages/upselling/service/upselling_service.ts
similarity index 100%
rename from x-pack/packages/security-solution/upselling/service/upselling_service.ts
rename to x-pack/solutions/security/packages/upselling/service/upselling_service.ts
diff --git a/x-pack/packages/security-solution/upselling/tsconfig.json b/x-pack/solutions/security/packages/upselling/tsconfig.json
similarity index 90%
rename from x-pack/packages/security-solution/upselling/tsconfig.json
rename to x-pack/solutions/security/packages/upselling/tsconfig.json
index 70b145ed91b7d..653738495ed81 100644
--- a/x-pack/packages/security-solution/upselling/tsconfig.json
+++ b/x-pack/solutions/security/packages/upselling/tsconfig.json
@@ -1,5 +1,5 @@
 {
-  "extends": "../../../../tsconfig.base.json",
+  "extends": "../../../../../tsconfig.base.json",
   "compilerOptions": {
     "outDir": "target/types",
     "types": [
diff --git a/yarn.lock b/yarn.lock
index f6743d45a58f7..f5d86b073069e 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7096,7 +7096,7 @@
   version "0.0.0"
   uid ""
 
-"@kbn/security-solution-upselling@link:x-pack/packages/security-solution/upselling":
+"@kbn/security-solution-upselling@link:x-pack/solutions/security/packages/upselling":
   version "0.0.0"
   uid ""