Foundation
$5,000
40 hours · 1 credit
- 1 CID · 5 OOTB + 2 custom connectors
- 5 simple + 2 complex correlations
- 1 simple playbook
- Kickoff and weekly status updates
- Project management support not included
PROFESSIONAL SERVICES / QUICK START
Build your NG-SIEM.
Choose your starting point.
Three implementation bundles combine data connectors, correlations and playbooks. Select a bundle to send your requirements for technical qualification.
QUICK START PACKAGES
A clear starting scope.
Expansion
$10,000
80 hours · 2 credits
- 2 CIDs · 10 OOTB + 5 custom connectors
- 10 simple + 4 complex correlations
- 3 simple + 1 complex playbooks
- Kickoff and weekly status updates
- Project management support
Enterprise
$15,000
120 hours · 3 credits
- 3 CIDs · 20 OOTB + 10 custom connectors
- 20 simple + 6 complex correlations
- 4 simple + 2 complex playbooks
- Kickoff and weekly status updates
- Project management support
FULL COMPARISON
See exactly what each bundle includes.
| In-scope task | Bundle 1 · Foundation | Bundle 2 · Expansion | Bundle 3 · Enterprise |
|---|---|---|---|
| 1-hour kickoff call | Included | Included | Included |
| Weekly status call or email | 30 minutes | 30 minutes | 30 minutes |
| Project management support | Not included | Included | Included |
| CIDs in scope | 1 | 2 | 3 |
| OOTB data connectors | 5 | 10 | 20 |
| Custom data connectors | 2 | 5 | 10 |
| Simple correlations | 5 | 10 | 20 |
| Complex correlations | 2 | 4 | 6 |
| Simple playbooks | 1 | 3 | 4 |
| Complex playbooks | 0 | 1 | 2 |
| Price (USD) | $5,000 | $10,000 | $15,000 |
| Estimated effort | 40 hours | 80 hours | 120 hours |
| Credits | 1 | 2 | 3 |
CID = CrowdStrike customer instance identifier. OOTB = out of the box. Estimated effort and credits are reproduced from the supplied bundle catalogue.
ENGAGEMENT SCOPE
Qualify the requirements before delivery.
Bundle qualification
Confirm supported sources, integration dependencies, required licenses and customer prerequisites before engagement.
Complexity & acceptance
Agree connector definitions, simple/complex use-case criteria, quantities across CIDs and acceptance tests in the statement of work.
Scope & effort
Hours are estimates from the catalogue. Any capacity cap, overage, credit validity and scope-change terms must be explicitly stated in the quotation.
BEYOND THE BUNDLES
Need a different Falcon engagement?
Define the outcome first.
For endpoint, identity, cloud, exposure, SaaS, custom integrations or larger SIEM migrations, request a tailored Professional Services proposal.
LET’S DEFINE THE SCOPE
Tell us what you need.
Your environment. Your priorities.
Complete a short questionnaire so our team can assess the requirements and prepare a suitable proposal.
Submit the questionnaire online and our team will reply with next steps. You can also download your answers or email them to [email protected].