Expel investigates alerts in existing tools and executes enabled containment after analyst review.
You still own Tool licenses, action permissions, exceptions and recovery
What they doContain threatsMDR
PriceCloud package: $88,800 / 12 months for 500 resources AWS Marketplace cloud-infrastructure dimension, paid upfront. This is one scoped offer, not a price for every MDR package. Confirm resource counting, coverage and current terms.
About this list
List your cluster types, hosting platforms and security tools. Ask which audit logs, runtime events and findings enter the service and how short-lived workloads remain identifiable during investigation.
Image scanning, configuration review and runtime response are separate capabilities. Confirm any required agents, access privileges and approval rules for actions that could interrupt workloads.
Questions
Does container coverage include image scanning?
Only if it is explicitly included. Ask whether scanning is provided, integrated from another tool or outside the service.
Can the provider contain a compromised workload?
Confirm the available actions for your cluster and tools. Agree approvals, exclusions and the handoff to platform engineers for restoration or deployment changes.
