Falcon Health Check
Ten business days, read-only access, one tenant. You get the full picture of how the platform is actually configured and a prioritised 30-day plan.
- Duration
- 10 business days
- Price
- From $2,500 per tenant
- Access
- A named read-only account you issue, MFA on, revoked at the end.
Who it is for
MSPs that sell Falcon and want to know, before the client asks, whether the tenant is doing its job.
What we review
- Sensor coverage: hosts without a sensor, outdated sensors, RFM, duplicates.
- Prevention and response policies against a recommended baseline, by host group.
- Every exclusion (ML, IOA, sensor visibility), classified by risk.
- Host groups and tags.
- Detections: volume, recurring false positives, untriaged detections, existing custom IOAs.
- Fusion workflows: failures and automation opportunities.
- Next-Gen SIEM, if licensed: connected sources, ingestion health, parsers, correlation rules, retention.
- Identity Protection, if licensed: domain coverage and policies.
- Real Time Response permissions and usage.
What you get
A 15 to 25 page report with findings rated critical, high, medium and low.
A 30-day plan, prioritised, with effort estimates.
A 60-minute walkthrough with your team.
A white label version to hand to your client.
- Access
- A named read-only account you issue, MFA on, revoked at the end.
- Price
- $2,500 per tenant. Three tenants: $6,000.