NFR Program

Deploy enhanced.io on your own network, free, for 90 days.

Agent-based security is only half the picture.
We see the rest.

Full Open XDR, 24/7 SOC, and a named Fractional Security Director. Not a sandbox, not a trial license. The complete production architecture running in your environment.

DAY 1 Deploy full Open XDR DAYS 1–10 Live SOC findings ACROSS THE WINDOW Harden and tune DAY 90 Decide: convert, findings, or walk away 90-DAY NFR TIMELINE
DAY 1 Deploy full Open XDR DAYS 1–10 Live SOC findings ACROSS THE WINDOW Harden and tune DAY 90 Decide: convert, findings, or walk away 90-DAY NFR TIMELINE

DAY 1

Deploy full Open XDR

DAYS 1–10

Live SOC findings

ACROSS THE WINDOW

Harden and tune

DAY 90

Decide: convert, findings, or walk away

90-DAY NFR TIMELINE

Best fit

Who this is for


For MSPs and IT services firms at the point where endpoint-only coverage is no longer enough for the clients they are taking on.

END-CLIENT BASE

MSPs and IT services firms whose clients are moving into mid-market, regulated-industry, or enterprise work where endpoint-only coverage stops being credible.

OPERATIONAL ENVIRONMENT

MSPs and IT services firms taking on OT, industrial IoT, building automation, or any environment where half the kit on the network cannot run an agent.

COMMERCIAL DECISION

Operators evaluating channel-only SOC alternatives to Arctic Wolf, Huntress, CrowdStrike, Darktrace, or building the capability in-house.

What you get

Full deployment, no sandbox, no limits

Full Open XDR architecture deployed on your own network.

Endpoint, network, identity, cloud, IoT, OT. Not a sample, not a sandbox. Full production architecture.

A named Fractional Security Director assigned from day one.

CISSP-certified, your point of contact for the 90 days. Joins calls, walks through findings, briefs your team.

24/7 SOC monitoring across all surfaces.

The same SOC posture our paying partners receive. Real analysts, real escalations, real runbooks for your environment.

Audit-ready compliance reporting.

Sample evidence mapped to NIST CSF, CIS Controls, NIS2, ISO 27001, and HIPAA.

Hardening and tuning, not just monitoring.

Across the 90 days we tune detections to your environment and harden the surfaces we find. What you see at day 90 is a configured deployment, not a default install.

What we need from you is light. Complete the onboarding forms, grant environment access, and push agents through your existing tooling.

Parallel deployment

Onboard a client during the same window


If you have a client ready to onboard during the same 90-day window, both deployments run in parallel. You get to demonstrate the architecture in front of a real end-client engagement, with our SOC and your named Fractional Security Director supporting you on every call.

YOUR NETWORK END-CLIENT NETWORK DAY 1–10 LIVE SOC FINDINGS PARALLEL PROOF CALL SOC + FSD 90 DAYS 90 DAYS

We implemented the platform internally first. That helped us understand its value before we took it to market, and the support from enhanced.io made it easy to launch.


Steve Pezzani, CEO, Shinka IT
NFR partner

Already deployed across these environments


MSPs moving upstream.

Endpoint-only coverage stops being credible at a certain client size and sector. We work with MSPs at that inflection point, whether or not their environment has OT or IoT.

OT, IoT, and regulated sectors.

Deployed across manufacturing, building management, industrial IoT, and regulated industries where half the network cannot run an endpoint agent.

Multi-site and hybrid cloud.

Deployed across organizations running workloads across multiple sites, cloud tenants, and data centers where a single-pane view across all surfaces is not optional.

Available across our core regions

The NFR program is open to MSPs and IT services firms across our core regions.

EMEA

NORTH AMERICA

APAC

After day 90

Three ways to exit - no pressure on any of them

Convert to a paid partnership.

Same architecture, same named Fractional Security Director, same SOC. No re-onboarding. One subscription fee covers everything.

Take the findings and continue independently.

You keep the compliance evidence and findings shared with you across the 90 days. We retain none of your data after exit. No contract, no follow-up obligation.

Walk away.

No obligation. No ongoing contract. No commercial follow-up unless you want one.

What a paid partnership includes


If you choose to convert, here is what the paid partnership looks like. The same architecture, the same team, no re-onboarding.

One subscription, not three line items.

The platform, the 24/7 SOC, and your named Fractional Security Director are bundled in one fee. No platform-plus-SOC-plus-FSD line items.

Per-endpoint or per user pricing.

You quote your clients with confidence because the underlying cost does not move when telemetry volume changes. We absorb the ingestion variability. No surprises.

Channel-only by commercial commitment.

enhanced.io never goes direct to your clients. Your relationship, your renewal, your margin.

Continuity.

The same architecture, the same SOC analysts, the same named Fractional Security Director who ran your 90 days. No re-onboarding.

Frequently asked questions

Questions we get asked

Is the 90 days actually free?

Yes. No fee, no trial license, no sandbox. The full production architecture runs in your environment for 90 days. The only cost is your time.

What exactly is deployed during the NFR?

How long does deployment take?

What do you need from us during the 90 days?

Do you need access to our clients during the NFR?

What happens to our data if we do not convert at day 90?

Will our Fractional Security Director change if we convert to a paid partnership?

Do you sell direct to our clients?

What if our client wants to talk to you directly?

How many NFR slots are available?

Ready to deploy?

We cap NFR slots each quarter so every deployment is well supported.

Hannah Lloyd, our co-founder, walks you through scope, timing, and the architectural fit for your environment.