See your plan, workspace licenses, agent usage, and billing in one place, and set token budgets and spend controls.
The Cost Management Center shows what your organization is licensed for and what its agents consume, and lets you set alerts and approval rules for charges.
Who is this for? Admins and finance or operations owners who manage ContraForce licensing and agent spend.
Select Cost Management in the left navigation. The header shows your plan, for example Bring Your Own Cloud (BYOC), and where you are in the current billing cycle.
The billing cycle and days elapsed, investigations and tokens this cycle, runs per day, token usage against a forecast for the cycle, and the five workspaces with the most runs.
Your workspace licenses (XDR or XDR + SIEM) and what each costs per month. The Cost impact panel shows the monthly price of adding an XDR workspace, adding an XDR + SIEM workspace, or upgrading a workspace to SIEM. Select Upgrade to SIEM on a workspace to upgrade it. Prices are read live from your billing provider, and changes take effect on your next invoice.
Runs and tokens this cycle, how many workspaces ran at least one investigation, your busiest workspace, and each workspace’s share of runs and tokens.
Choose who receives cost alerts: workspace members or any email address. Set a Usage budget (a monthly token budget and the percentages to notify at, for example 80, 100), and turn on the alert for when a workspace license is added or upgraded. Investigations keep running when a budget is reached.
Auto-approve charges approves plan-driven charges without a confirmation prompt; every auto-approved charge is still recorded in your audit log. SIEM license escalations auto-approves the reprice when connecting a SIEM source upgrades a workspace to an XDR + SIEM license.
Your plan, payment method, and invoices, once billing is active for your organization.
On the Bring Your Own Cloud (BYOC) plan, which is the Your Agents hosting model on contraforce.com/pricing, agents run in your own Azure subscription. The Agent Center shows this deployment model as Your Cloud. Token volume in the Cost Management Center is shown for visibility: Azure bills the Microsoft Foundry usage to your subscription, and ContraForce doesn’t bill per run on this plan.
Set a Usage budget under Cost Alerts so you hear about unusual token consumption before your Azure bill arrives.
