Incydr Basic, Advanced, and Gov F1 product plans
Who is this article for?
Instructor, no.
Incydr Professional, Enterprise, Horizon, and Gov F2, no.
Incydr Basic, Advanced, and Gov F1, yes.
Overview
This article explains which features are included in Incydr Basic, Incydr Advanced, and Incydr Gov F1 product plans. Incydr is a SaaS data risk detection and response product that allows security teams to effectively mitigate file exposure and exfiltration risks without disrupting legitimate collaboration.
At a glance
- Incydr Basic provides fundamental features for insider risk detection, investigation, and response.
- Incydr Advanced provides all of our most advanced features for insider risk detection, investigation, and response.
- Incydr Gov F1 is the FedRAMP-authorized version of our Incydr Advanced product. For more details, see Code42 and FedRAMP compliance.
Product plan details
Supported risk detection sources
Incydr Basic | Incydr Advanced | Incydr Gov F1 | |
---|---|---|---|
Endpoints | Windows, Mac, Linux | Windows, Mac, Linux | Windows, Mac, Linux |
Business applications1 |
Available as an add-on.
Supported services: Salesforce |
Available as an add-on.
Supported services: Salesforce |
Available as an add-on.
Supported services: Salesforce |
Cloud storage services1 |
One cloud service is included. Additional cloud services can be added.
Supported cloud services: |
One cloud service is included. Additional cloud services can be added.
Supported cloud services: |
Available as an add-on.
Supported cloud services: |
Email services1 |
Available as an add-on.
Supported email services: Office365, Gmail |
Available as an add-on.
Supported email services: Office365, Gmail |
Available as an add-on. |
1. Additional vendor licensing is required. See Vendor license requirements for Code42 data connections for more information.
Platform capabilities
Incydr Basic | Incydr Advanced | Incydr Gov F1 | |
---|---|---|---|
Endpoint monitoring | ![]() |
![]() |
![]() |
File metadata collection | –No | ![]() |
![]() |
Trusted activity preferences | ![]() |
![]() |
![]() |
File collection and preservation | ![]() |
![]() |
![]() |
Event data retention | 30 days Upgrade to 90 days available for purchase |
90 days | 90 days |
Automatic case archival | 90 days | 180 days | 180 days |
Features
Incydr Basic | Incydr Advanced | Incydr Gov F1 | |
---|---|---|---|
Insider risk indicators: file, vector, and user | ![]() |
![]() |
![]() |
Off hours risk indicator | –No | ![]() |
![]() |
Security events dashboards: Risk Exposure and Insider Risk Trends | ![]() |
![]() |
![]() |
Watchlists | ![]() |
![]() |
![]() |
User activity profiles | ![]() |
![]() |
![]() |
Alerting | ![]() |
![]() |
![]() |
Forensic Search | ![]() |
![]() |
![]() |
Download exfiltrated file contents | ![]() |
![]() |
![]() |
Case management for investigations | ![]() |
![]() |
![]() |
Extended retention of file content (legal hold) |
![]() |
![]() |
![]() |
Code42 Instructor | Available as an add-on | Available as an add-on | Available as an add-on |
Integrations
Incydr Basic | Incydr Advanced | Incydr Gov F1 | |
---|---|---|---|
Code42 API |
Upgrade to full access available for purchase |
![]() |
![]() |
Identity management/SSO | ![]() |
![]() |
![]() |
SOAR integrations |
![]() |
![]() |
![]() |
SIEM integrations | ![]() |
![]() |
![]() |
Incydr Flows (workflow automations) | Paid service | Paid service | –No |
Support plans
For details about these support plans, see Incydr support policy.
Incydr Basic | Incydr Advanced | Incydr Gov F1 | |
---|---|---|---|
Level | Code42 Premier Support Upgrade to Code42 Premier Plus Support available for purchase |
Code42 Premier Support
|
Code42 Premier Support Upgrade to Code42 Premier Plus Support available for purchase |
ProStart | Paid service | Paid service | Paid service |