Who does what
Provider
- Monitor and investigate eyeAlert detections
- Hunt and document incidents
- Escalate with response guidance
Your team
- Maintain platform and source access
- Decide and execute containment
- Complete remediation and recovery
Coverage
- Network
- Endpoints
Details
Service scope
Best for Teams already using eyeAlert that retain staff to execute response and recovery
Platform dependency
Assist requires eyeAlert, formerly TDR. Confirm current entitlements and telemetry sources.
Response boundary
Analysts investigate and advise. Hands-on containment and recovery remain buyer responsibilities unless the order explicitly changes that scope.
Reseller price
The CDW example covers an Assist subscription SKU for 1,000 endpoints over one year. It is not a total platform and deployment price.
Full service analysis
Forescout Assist monitors eyeAlert detections around the clock, investigates suspicious activity and escalates confirmed incidents with containment guidance. The buyer maintains the platform and connected sources, then executes containment, remediation and recovery.
- Your team owns
- Maintain the required eyeAlert entitlement, sensors and connected data sources
- Provide asset context, escalation contacts and response decisions
- Execute containment, remediation and business recovery
Platform naming
Current documentation calls the platform eyeAlert, formerly Threat Detection and Response. The managed service remains an optional Assist add-on with a required platform entitlement.
Response boundary
The Assist service page documents investigation, incident escalation and response guidance. The broader platform can automate controls, but that does not establish Assist analyst authority to perform containment.
Pricing boundary
The reseller example uses the current eyeAlert Assist SKU rather than the older F/XDR listing. It does not include confirmation of all required platform, source and deployment costs.
Pricing & contract
$34,359.99 / 1,000 endpoints / year Indicative pricing from public research, not official provider pricing. Ask the provider for a current quote. CDW lists FS-ASSIST-SVCS-1000-1Y-SUB at $34,359.99, checked 3 October 2026. This is a reseller Assist subscription example. Required eyeAlert entitlement, sensors, integrations and deployment must be quoted separately.
CDW reseller Assist SKU, checked 3 October 2026. Required eyeAlert entitlement is separate.
- Billing
- Per-endpoint, Custom
Tradeoffs & buying questions
Strengths
-
Explicit investigation and escalation workflow
-
Checks on log-source continuity accompany threat analysis
Considerations
-
Requires a separately entitled eyeAlert platform
-
Buyers retain response execution and recovery
-
The reseller SKU is an Assist component price, not an all-in deployment quote
Ask before buying
- Which eyeAlert entitlements, sensors and monitored quantities does this Assist quote require?
- Which actions are guidance only, and does the signed service order authorize any direct execution?
- Which triage, escalation, hunting and log-source-health commitments apply to our contract?
Integrations
Platform / SIEM
- Forescout eyeAlert (formerly TDR)
Common questions
Is Forescout TDR a different platform from eyeAlert?
Current documentation identifies eyeAlert as the renamed TDR platform. Confirm that the order uses the current platform and Assist service SKUs.
Does Assist execute containment?
Its public description promises incident escalation and containment guidance. Confirm any direct action authority in the order before assigning execution to the provider.
What does the listed price cover?
It is CDW’s reseller price for one 1,000-endpoint, one-year Assist subscription SKU. The required eyeAlert entitlement and deployment costs need a separate quote.
Company details
- Founded
- 2000