Incident Command and MDR assets are OS hosts with data in the last 30 days
Catalog row in Vendor License Rules · Cited
- Kind
- Counting
- Statement
- Incident Command and Managed Threat Complete pricing FAQs: an asset is a host running a workstation or server operating system to which data has been attributed in the last 30 days, including physical and virtual servers, desktops, laptops and point-of-sale systems. Price does not change by asset type, and the per-asset price decreases across asset count tiers. Hosts that have sent no data for 30 days drop out of the count. (vendor document undated; as published on 2026-09-30)
- Applies when
- Counting SIEM or MDR assets.
- Applies to
- InsightIDR / Incident Command, Managed Threat Complete.
- Related metrics