A slot model, not per-finding billing.
MSSPs buy delivery capacity, then decide how to use it across assessments, recurring monitoring, intelligence briefings, and later investigation work. Slots move with the business: reassign them between clients, switch between project and continuous modes, or redirect capacity into Watch and Investigation services. No penalties, no stranded licenses.
Assessment mode
Use CIH to run one-time projects, prove value, and create a path into larger or recurring client work.
Continuous mode
Keep selected clients under ongoing monitoring and reporting as part of a managed or retainer model.
Expansion path
The same commercial foundation supports Watch Premium and Investigation services.
Accessible entry point
CIH is not priced like a big enterprise platform license. The entry point is designed so a single recurring client relationship can support it, and the numbers are usually lower than MSSPs expect.