Incident response day
Catalog row in Vendor License Metrics · Cited
- Unit
- Other
- Aliases
- Prepaid day; First Response Package; day-rate
- Definition
- "Incident Response Retainer includes one First Response Package: one prepaid day of incident-response work." (MDR administrator guide, 2026-09-09.) Outside a retainer, the Co-Security Services page states that emergency DFIR services "are provided at standard day-rates, subject to availability".
- Counting rules
- The First Response Package covers support in the first 72 hours after a serious incident; the Elements DFIR Retainer has "No pre-paid days – on-demand at pre-agreed rates", while the traditional IR Retainer "includes pre-paid days with discounted rates" (Co-Security Services page).
- Floors / minimums
- One prepaid day in the First Response Package included with the MDR Incident Response Retainer.
- Applies to products
- WithSecure Managed Detection and Response
- WithSecure Elements DFIR Retainer
- WithSecure Incident Response Retainer
- Related metrics
- Related from