Every Critical Start managed service contract includes service credits: a prepaid, flexible currency your team can spend across 40+ services. MDR for Endpoint, MDR for SIEM, and VMS each include credits, and if you have more than one, your credits stack into a single bank. Need a tabletop exercise? Custom detections? A Sentinel deployment? Spend credits. Predictable costs, streamlined engagement, expert delivery.
Review the Services Catalog or speak with your Customer Success Manager to confirm which service fits your needs, how many credits you have, and how many credits it costs.
Contact your CSM with the service you're requesting and any relevant details (scope, timeline, or priority) or create a ticket directly in the CORR Customer Support Portal.
A Critical Start engineer is assigned to complete the work. Credits are deducted once the service is delivered. Some engagements may require a scoping exercise prior to execution.
You receive confirmation that the service has been completed and your updated credit balance. Credit balance reviews are also a standard part of your Quarterly Business Reviews.
Credits from multiple subscriptions pool into a single bank, and IR Retainer customers can convert unused hours into credits for even more flexibility.
If you have both MDR for Endpoint and MDR for SIEM, your credits from each are combined into a single Service Credits Bank. Use them on any service in the catalog. No restrictions on which subscription the credits came from.
Hold a Critical Start IR Retainer? Unused retainer hours can be converted into service credits at a rate of 3 hours per 1 credit, giving you the flexibility to apply those hours to proactive security work, not just incident response.
Contact your Customer Success Manager to convert retainer hours.
Real scenarios where service credits eliminate procurement friction and accelerate outcomes.
Redeem 10 credits for a tabletop exercise to validate your incident response plan before the auditors arrive. No procurement cycle. Your CSM schedules it immediately.
Redeem 1 credit for a CRU intelligence RFI to get a tailored threat briefing, then spend 1 credit on a custom detection to address the specific TTP. Two credits, same day.
Redeem 20 credits for a full Sentinel deployment (5 data sources, 2 playbooks, 2 automations) delivered by Critical Start engineers who already know your environment from MDR.
Redeem 15 credits for a small-environment penetration test delivered by Critical Start's CIRT team. Results feed directly into your MDR detections, with no handoff gap.
Redeem 1 credit for a deep-dive platform training session. Your analysts get hands-on CORR expertise without scheduling a separate vendor engagement.
Your MDR relationship means the CIRT team already has context on your environment. Service credits get you into incident response immediately. No emergency procurement.
Your demo includes a walkthrough of the service credit program: how credits work, what's in the catalog, and how your team can start using them from day one.
No asterisks.
