Question 1

What counts as an endpoint?

Accepted Answer

Any workstation or server with the Falcon sensor installed. You only pay for what's deployed - add or remove endpoints any time and billing follows.

Question 2

Can I mix tiers across clients?

Accepted Answer

Yes. Tiers are set per customer tenant, not per account. Run Managed for most clients, Core where they have their own IT, Elite where identity matters.

Question 3

How does annual billing work?

Accepted Answer

You commit for 12 months at 10% off and your rate is locked. Growth above your starting count bills at the same locked rate.

Question 4

Is there a minimum?

Accepted Answer

No platform minimums. Start with a single client and scale - volume pricing applies automatically as your total endpoint count grows.

Question 5

What does "managed" actually mean?

Accepted Answer

Falcon Complete and OverWatch analysts monitor, investigate, and remediate threats on your behalf, 24/7. You keep the client relationship and the console; they do the 2 a.m. work.

Question 6

Why is Email Security pre-selected in quotes?

Accepted Answer

Because endpoint + email covers the two ways attackers actually get in. It's attached per client and pre-filled from your endpoint count - uncheck it for any client that already has email security covered.

Question 7

Can we trial Email Security first?

Accepted Answer

Yes - run it in monitor mode for 30 days with no change to mail flow. You see every detection it would have made before the client depends on it.