Use the Cost Management Center to see your plan, XDR and XDR + SIEM licenses, agent token usage, and billing, then set usage budgets and spend controls.
The Cost Management Center shows what your organization is licensed for and what its agents consume, and lets you set alerts and approval rules for charges.
Who is this for? Admins and finance or operations owners who manage ContraForce licensing and agent spend.
Select Cost Management in the left navigation. The header shows your plan, for example Bring Your Own Cloud (BYOC), and where you are in the current billing cycle.
The billing cycle and days elapsed, investigations and tokens this cycle, runs per day, token usage against a forecast for the cycle, and the five workspaces with the most runs.
Your workspace licenses (XDR or XDR + SIEM) and what each costs per month. The Cost impact panel shows the monthly price of adding an XDR workspace, adding an XDR + SIEM workspace, or upgrading a workspace to SIEM. Select Upgrade to SIEM on a workspace to upgrade it. Prices are read live from your billing provider, and changes take effect on your next invoice.
Runs and tokens this cycle, how many workspaces ran at least one investigation, your busiest workspace, and each workspace’s share of runs and tokens.
Choose who receives cost alerts: workspace members or any email address. Set a Usage budget (a monthly token budget and the percentages to notify at, for example 80, 100), and turn on the alert for when a workspace license is added or upgraded. Investigations keep running when a budget is reached.
Auto-approve charges approves plan-driven charges without a confirmation prompt; every auto-approved charge is still recorded in your audit log. SIEM license escalations auto-approves the reprice when connecting a SIEM source upgrades a workspace to an XDR + SIEM license.
Your plan, payment method, and invoices, once billing is active for your organization.
On the Bring Your Own Cloud (BYOC) plan, which is the Your Agents hosting model on contraforce.com/pricing, agents run in your own Azure subscription. Token volume in the Cost Management Center is shown for visibility: Azure bills the Microsoft Foundry usage to your subscription, and ContraForce doesn’t bill per run on this plan.
Set a Usage budget under Cost Alerts so you hear about unusual token consumption before your Azure bill arrives.
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"ContraForce","description":"Documentation for ContraForce, the AI-powered security delivery platform for MSPs, MSSPs, and SOC teams: onboarding, incident response, Gamebooks, agents, and the API.","colors":{"primary":"#2557F9","light":"#2E6FFF","dark":"#1E4CF2"},"logo":{"light":"https://mintcdn.com/contraforce/JwvC6GjQ6Yq_yq8M/images/contraforce_logp_lightmode.svg?fit=max\u0026auto=format\u0026n=JwvC6GjQ6Yq_yq8M\u0026q=85\u0026s=19a655faefc3e38ab74135c16698a7e4","dark":"https://mintcdn.com/contraforce/JwvC6GjQ6Yq_yq8M/images/contraforce_logo_darkmode.svg?fit=max\u0026auto=format\u0026n=JwvC6GjQ6Yq_yq8M\u0026q=85\u0026s=8a74f54b37ce3070d377a7ef69e4ed7b","href":"/"},"favicon":"https://mintcdn.com/contraforce/JwvC6GjQ6Yq_yq8M/images/contraforce_mark_blue.svg?fit=max\u0026auto=format\u0026n=JwvC6GjQ6Yq_yq8M\u0026q=85\u0026s=7814ccc29667eafaec88ff86cda61ad5","navbar":{"links":[{"href":"mailto:support@contraforce.com","label":"Support"}],"primary":{"type":"button","label":"Dashboard","href":"https://portal.contraforce.com"}},"footer":{"socials":{"linkedin":"https://linkedin.com/company/contraforce"}},"seo":{"metatags":{"og:site_name":"ContraForce Docs"},"paths":[{"path":"staging","metatags":{"robots":"noindex"}}],"organization":{"name":"ContraForce","url":"https://www.contraforce.com","sameAs":["https://www.linkedin.com/company/contraforce"]},"indexing":"navigable"},"fonts":{"heading":{"family":"Inter","weight":600},"body":{"family":"Inter","weight":300}},"icons":{"library":"fontawesome"},"contextual":{"options":["copy","view","chatgpt","claude","perplexity","mcp","cursor","vscode"],"display":"header"},"thumbnails":{"appearance":"dark"},"metadata":{"timestamp":true},"styling":{"latex":true},"navigation":{"global":{"anchors":[{"anchor":"Overview","icon":"street-view","color":{"light":"#2557F9","dark":"#2E6FFF"},"href":"/overview"},{"anchor":"Release Notes","icon":"notes","color":{"light":"#2557F9","dark":"#2E6FFF"},"href":"/release-notes"},{"anchor":"Blog","icon":"newspaper","color":{"light":"#2557F9","dark":"#2E6FFF"},"href":"/blog"},{"anchor":"API Reference","icon":"code","color":{"light":"#2557F9","dark":"#2E6FFF"},"href":"/api-reference/endpoints"}]},"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"contraforce","hasAudioNarration":false,"actualSubdomain":"contraforce","customDomains":["docs.contraforce.com"],"gitSource":{"type":"github","owner":"contraforce","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"entitlements":{"AI_CHAT":{"status":"DISABLED"}},"buildId":"6aeca7cdfcdd00e044109e16","clientVersion":"0.0.4087","searchFilterCounts":[{"language":"default","tag":"API Reference","count":83},{"language":"default","tag":"API Playground","count":79},{"language":"default","tag":"Guides","count":66},{"language":"default","tag":"Blog","count":56},{"language":"default","tag":"Getting started","count":16},{"language":"default","tag":"Onboarding","count":14},{"language":"default","tag":"Webhooks","count":14},{"language":"default","tag":"Technical","count":12},{"language":"default","tag":"Incidents","count":11},{"language":"default","tag":"agent-tools","count":10}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"comment-mode","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"guides/general-support/cost-management-center","slug":"/guides/general-support/cost-management-center","pageMetadata":{"title":"Cost Management Center","description":"Use the Cost Management Center to see your plan, XDR and XDR + SIEM licenses, agent token usage, and billing, then set usage budgets and spend controls.","keywords":["ContraForce billing and licensing","XDR and XDR + SIEM workspace licenses","agent token usage budget","upgrade workspace to SIEM","Bring Your Own Cloud (BYOC) agent costs","cost alerts and spend controls"],"href":"/guides/general-support/cost-management-center"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Use the Cost Management Center to see your plan, XDR and XDR + SIEM licenses, agent token usage, and billing, then set usage budgets and spend controls.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,code:`code`,hr:`hr`,p:`p`,strong:`strong`,..._provideComponents(),...props.components},{Card,CardGroup,Heading,Info,Note,Tab,Tabs,Tip}=_components;if(!Card)_missingMdxReference(`Card`,true);if(!CardGroup)_missingMdxReference(`CardGroup`,true);if(!Heading)_missingMdxReference(`Heading`,true);if(!Info)_missingMdxReference(`Info`,true);if(!Note)_missingMdxReference(`Note`,true);if(!Tab)_missingMdxReference(`Tab`,true);if(!Tabs)_missingMdxReference(`Tabs`,true);if(!Tip)_missingMdxReference(`Tip`,true);return _jsxs(_Fragment,{children:[_jsx(_components.p,{children:`The Cost Management Center shows what your organization is licensed for and what its agents consume, and lets you set alerts and approval rules for charges.`}),`\n`,_jsx(Info,{children:_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`Who is this for?`}),` Admins and finance or operations owners who manage ContraForce licensing and agent spend.`]})}),`\n`,_jsxs(_components.p,{children:[`Select `,_jsx(_components.strong,{children:`Cost Management`}),` in the left navigation. The header shows your plan, for example `,_jsx(_components.strong,{children:`Bring Your Own Cloud (BYOC)`}),`, and where you are in the current billing cycle.`]}),`\n`,_jsx(_components.hr,{}),`\n`,_jsx(Heading,{level:`2`,id:`what-each-tab-shows`,children:`What Each Tab Shows`}),`\n`,_jsxs(Tabs,{children:[_jsx(Tab,{title:`Overview`,id:`overview`,children:_jsx(_components.p,{children:`The billing cycle and days elapsed, investigations and tokens this cycle, runs per day, token usage against a forecast for the cycle, and the five workspaces with the most runs.`})}),_jsx(Tab,{title:`Licenses`,id:`licenses`,children:_jsxs(_components.p,{children:[`Your workspace licenses (`,_jsx(_components.strong,{children:`XDR`}),` or `,_jsx(_components.strong,{children:`XDR + SIEM`}),`) and what each costs per month. The `,_jsx(_components.strong,{children:`Cost impact`}),` panel shows the monthly price of adding an XDR workspace, adding an XDR + SIEM workspace, or upgrading a workspace to SIEM. Select `,_jsx(_components.strong,{children:`Upgrade to SIEM`}),` on a workspace to upgrade it. Prices are read live from your billing provider, and changes take effect on your next invoice.`]})}),_jsx(Tab,{title:`Usage`,id:`usage`,children:_jsx(_components.p,{children:`Runs and tokens this cycle, how many workspaces ran at least one investigation, your busiest workspace, and each workspace’s share of runs and tokens.`})}),_jsx(Tab,{title:`Cost Alerts`,id:`cost-alerts`,children:_jsxs(_components.p,{children:[`Choose who receives cost alerts: workspace members or any email address. Set a `,_jsx(_components.strong,{children:`Usage budget`}),` (a monthly token budget and the percentages to notify at, for example `,_jsx(_components.code,{children:`80, 100`}),`), and turn on the alert for when a workspace license is added or upgraded. Investigations keep running when a budget is reached.`]})}),_jsx(Tab,{title:`Spend Controls`,id:`spend-controls`,children:_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`Auto-approve charges`}),` approves plan-driven charges without a confirmation prompt; every auto-approved charge is still recorded in your audit log. `,_jsx(_components.strong,{children:`SIEM license escalations`}),` auto-approves the reprice when connecting a SIEM source upgrades a workspace to an XDR + SIEM license.`]})}),_jsx(Tab,{title:`Billing`,id:`billing`,children:_jsx(_components.p,{children:`Your plan, payment method, and invoices, once billing is active for your organization.`})})]}),`\n`,_jsx(_components.hr,{}),`\n`,_jsx(Heading,{level:`2`,id:`self-hosted-agents-byoc`,children:`Self-Hosted Agents (BYOC)`}),`\n`,_jsxs(_components.p,{children:[`On the `,_jsx(_components.strong,{children:`Bring Your Own Cloud (BYOC)`}),` plan, which is the `,_jsx(_components.strong,{children:`Your Agents`}),` hosting model on `,_jsx(_components.a,{href:`https://www.contraforce.com/pricing`,children:`contraforce.com/pricing`}),`, agents run in your own Azure subscription. Token volume in the Cost Management Center is shown for visibility: Azure bills the Microsoft Foundry usage to your subscription, and ContraForce doesn’t bill per run on this plan.`]}),`\n`,_jsx(Tip,{children:_jsxs(_components.p,{children:[`Set a `,_jsx(_components.strong,{children:`Usage budget`}),` under `,_jsx(_components.strong,{children:`Cost Alerts`}),` so you hear about unusual token consumption before your Azure bill arrives.`]})}),`\n`,_jsx(_components.hr,{}),`\n`,_jsx(Heading,{level:`2`,id:`related-guides`,children:`Related Guides`}),`\n`,_jsxs(CardGroup,{cols:2,children:[_jsx(Card,{title:`Deploying Agent Center`,icon:`server`,href:`/guides/onboarding/agent-center-deployment`,children:_jsx(_components.p,{children:`Where self-hosted agents run`})}),_jsx(Card,{title:`Workspace Center`,icon:`folder-tree`,href:`/guides/getting-started/workspace-manager`,children:_jsx(_components.p,{children:`Add and manage workspaces`})})]}),`\n`,_jsx(_components.hr,{}),`\n`,_jsx(Note,{children:_jsxs(_components.p,{children:[`Questions about billing or licensing? Contact us at `,_jsx(_components.a,{href:`mailto:support@contraforce.com`,children:`support@contraforce.com`}),`.`]})})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Cost Management Center","description":"Use the Cost Management Center to see your plan, XDR and XDR + SIEM licenses, agent token usage, and billing, then set usage budgets and spend controls.","keywords":["ContraForce billing and licensing","XDR and XDR + SIEM workspace licenses","agent token usage budget","upgrade workspace to SIEM","Bring Your Own Cloud (BYOC) agent costs","cost alerts and spend controls"],"href":"/guides/general-support/cost-management-center"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"What Each Tab Shows","slug":"what-each-tab-shows","depth":2,"children":[]},{"title":"Self-Hosted Agents (BYOC)","slug":"self-hosted-agents-byoc","depth":2,"children":[]},{"title":"Related Guides","slug":"related-guides","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":[],"subdomain":"contraforce","siteName":"ContraForce","title":"Cost Management Center - ContraForce","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-29T11:43:17.296Z","gitLastModified":"2026-10-29T11:43:07.000Z","originalFileLocation":"guides/general-support/cost-management-center.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Use the Cost Management Center to see your plan, XDR and XDR + SIEM licenses, agent token usage, and billing, then set usage budgets and spend controls.\">\u003cmeta data-mint-head name=\"application-name\" content=\"ContraForce\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/contraforce/CXQZ_dOqpuuVl-zr/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/contraforce/CXQZ_dOqpuuVl-zr/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/contraforce/CXQZ_dOqpuuVl-zr/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/contraforce/CXQZ_dOqpuuVl-zr/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/contraforce/CXQZ_dOqpuuVl-zr/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/contraforce/CXQZ_dOqpuuVl-zr/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/contraforce/CXQZ_dOqpuuVl-zr/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/contraforce/CXQZ_dOqpuuVl-zr/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/contraforce/CXQZ_dOqpuuVl-zr/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Cost Management Center - ContraForce\">\u003cmeta data-mint-head property=\"og:description\" content=\"Use the Cost Management Center to see your plan, XDR and XDR + SIEM licenses, agent token usage, and billing, then set usage budgets and spend controls.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"ContraForce Docs\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.contraforce.com/guides/general-support/cost-management-center\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://contraforce.mintlify.site/_mintlify/api/og/v2?division=General+Support\u0026amp;title=Cost+Management+Center\u0026amp;description=Use+the+Cost+Management+Center+to+see+your+plan%2C+XDR+and+XDR+%2B+SIEM+licenses%2C+agent+token+usage%2C+and+billing%2C+then+set+usage+budgets+and+spend+controls.\u0026amp;theme=c885a8329365fbd1cccffc91\u0026amp;signature=beefefe05fd345568f4262a38485c5db409832d4c9cc6ca0cb2ca768dad6ed0c\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Cost Management Center - ContraForce\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Use the Cost Management Center to see your plan, XDR and XDR + SIEM licenses, agent token usage, and billing, then set usage budgets and spend controls.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://contraforce.mintlify.site/_mintlify/api/og/v2?division=General+Support\u0026amp;title=Cost+Management+Center\u0026amp;description=Use+the+Cost+Management+Center+to+see+your+plan%2C+XDR+and+XDR+%2B+SIEM+licenses%2C+agent+token+usage%2C+and+billing%2C+then+set+usage+budgets+and+spend+controls.\u0026amp;theme=c885a8329365fbd1cccffc91\u0026amp;signature=beefefe05fd345568f4262a38485c5db409832d4c9cc6ca0cb2ca768dad6ed0c\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/contraforce/CXQZ_dOqpuuVl-zr/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"ContraForce\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#2557F9\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.contraforce.com/guides/general-support/cost-management-center\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/guides/general-support/cost-management-center.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://www.contraforce.com/#organization\",\"name\":\"ContraForce\",\"url\":\"https://www.contraforce.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/contraforce/JwvC6GjQ6Yq_yq8M/images/contraforce_logp_lightmode.svg?fit=max\u0026auto=format\u0026n=JwvC6GjQ6Yq_yq8M\u0026q=85\u0026s=19a655faefc3e38ab74135c16698a7e4\"},\"sameAs\":[\"https://www.linkedin.com/company/contraforce\"]},{\"@type\":\"WebSite\",\"@id\":\"https://docs.contraforce.com#website\",\"name\":\"ContraForce\",\"url\":\"https://docs.contraforce.com\",\"publisher\":{\"@id\":\"https://www.contraforce.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.contraforce.com/guides/general-support/cost-management-center#webpage\",\"url\":\"https://docs.contraforce.com/guides/general-support/cost-management-center\",\"name\":\"Cost Management Center\",\"description\":\"Use the Cost Management Center to see your plan, XDR and XDR + SIEM licenses, agent token usage, and billing, then set usage budgets and spend controls.\",\"dateModified\":\"2026-10-29T11:43:07.000Z\",\"isPartOf\":{\"@id\":\"https://docs.contraforce.com#website\"},\"breadcrumb\":{\"@id\":\"https://docs.contraforce.com/guides/general-support/cost-management-center#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.contraforce.com/guides/general-support/cost-management-center#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"General Support\",\"item\":\"https://docs.contraforce.com/submit-ticket\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cost Management Center\",\"item\":\"https://docs.contraforce.com/guides/general-support/cost-management-center\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://docs.contraforce.com/guides/general-support/cost-management-center#article\",\"headline\":\"Cost Management Center\",\"name\":\"Cost Management Center\",\"description\":\"Use the Cost Management Center to see your plan, XDR and XDR + SIEM licenses, agent token usage, and billing, then set usage budgets and spend controls.\",\"url\":\"https://docs.contraforce.com/guides/general-support/cost-management-center\",\"mainEntityOfPage\":{\"@id\":\"https://docs.contraforce.com/guides/general-support/cost-management-center#webpage\"},\"dateModified\":\"2026-10-29T11:43:07.000Z\",\"keywords\":\"ContraForce billing and licensing, XDR and XDR + SIEM workspace licenses, agent token usage budget, upgrade workspace to SIEM, Bring Your Own Cloud (BYOC) agent costs, cost alerts and spend controls\",\"publisher\":{\"@id\":\"https://www.contraforce.com/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.contraforce.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"ContraForce\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"ContraForce","nav":{"global":{"anchors":[{"anchor":"Overview","icon":"street-view","color":{"light":"#2557F9","dark":"#2E6FFF"},"href":"/overview"},{"anchor":"Release Notes","icon":"notes","color":{"light":"#2557F9","dark":"#2E6FFF"},"href":"/release-notes"},{"anchor":"Blog","icon":"newspaper","color":{"light":"#2557F9","dark":"#2E6FFF"},"href":"/blog"},{"anchor":"API Reference","icon":"code","color":{"light":"#2557F9","dark":"#2E6FFF"},"href":"/api-reference/endpoints"}]},"tabs":[{"tab":"Guides","groups":[{"group":"Getting started","pages":[{"title":"Agentic Security Delivery Platform Documentation","sidebarTitle":"Overview","href":"/overview"},{"title":"Command Dashboard: SOC Metrics Across Workspaces","sidebarTitle":"Command Dashboard","href":"/guides/getting-started/command-dashboard"},{"title":"Quick Actions: Command Palette (Ctrl + K)","sidebarTitle":"Quick Actions","href":"/guides/getting-started/quick-actions"},{"title":"Workspace Center: Manage Customer Workspaces","sidebarTitle":"Workspace Center","href":"/guides/getting-started/workspace-manager"},{"title":"Workspace Environments: Endpoints and Licenses","sidebarTitle":"Workspace Environments","href":"/guides/getting-started/workspace-environments"},{"title":"Content Management System: Detection Rules","sidebarTitle":"Content Management System","href":"/guides/getting-started/content-management-system"},{"title":"Security Incident Management: Triage to Closure","sidebarTitle":"Incident Management","href":"/guides/getting-started/incident-management"},{"title":"Incident Report: Closed Incidents and PDF Export","sidebarTitle":"Incident Report","href":"/guides/getting-started/incident-report"},{"title":"Incident SLA Tracking: Response and Resolution","sidebarTitle":"SLA Tracking","href":"/guides/getting-started/sla-tracking"},{"title":"How to Classify Incidents: True vs False Positive","sidebarTitle":"Incident Classifications","href":"/guides/getting-started/incident-classifications"},{"title":"Multi-Tenant Security for MSPs and MSSPs","sidebarTitle":"Multi-Tenant Features","href":"/guides/getting-started/multi-tenant-features"},{"title":"Workbench: Incident Investigation and Response","sidebarTitle":"Workbench Overview","href":"/guides/getting-started/workbench-overview"},{"title":"Log Search: Run KQL Queries on Workspace Logs","sidebarTitle":"Log Search","href":"/guides/getting-started/log-search"},{"title":"What Are Gamebooks? No-Code Incident Response","sidebarTitle":"What Are Gamebooks?","href":"/guides/getting-started/what-are-gamebooks"},{"title":"Workspace Policies for Gamebooks and Agents","sidebarTitle":"Workspace Policies","href":"/guides/getting-started/workspace-policies"},{"title":"Platform Permissions: Microsoft Entra ID Consent","sidebarTitle":"Platform Permissions \u0026 Consent","href":"/guides/getting-started/platform-permissions-and-consent"}]},{"group":"Onboarding","pages":[{"title":"Onboarding Overview for MSPs and Customers","sidebarTitle":"Onboarding Workspaces","href":"/onboarding-customer-workspaces"},{"title":"MSP and MSSP Platform Onboarding","sidebarTitle":"Platform Onboarding","href":"/guides/onboarding/platform-onboarding"},{"title":"Customer Workspace Onboarding","href":"/guides/onboarding/customer-workspace-onboarding"},{"title":"Onboarding Admin Roles and App Permissions","sidebarTitle":"Onboarding Permissions","href":"/guides/onboarding/workspace-onboarding"},{"title":"Deploying Agent Center with Microsoft Foundry","sidebarTitle":"Deploying Agent Center","href":"/guides/onboarding/agent-center-deployment"},{"title":"Configuring Security Delivery Agents","href":"/guides/getting-started/configuring-security-delivery-agents"},{"title":"User and Group Management for MSPs and MSSPs","sidebarTitle":"MSP/MSSP Users \u0026 Groups","href":"/guides/onboarding/user-group-management-for-providers"},{"title":"Email Notifications for Incidents and Gamebooks","sidebarTitle":"Email Notifications","href":"/guides/onboarding/notifications-module"},{"title":"Microsoft Sentinel Incident Email Notifications","sidebarTitle":"Configure Notifications","href":"/guides/technical/notifications-configuration"},{"title":"Microsoft Sentinel Module Deployment","sidebarTitle":"Microsoft Sentinel Integration","href":"/guides/onboarding/microsoft-sentinel-module"},{"title":"Microsoft Defender for Endpoint Module Deployment","sidebarTitle":"Defender for Endpoint Module","href":"/guides/onboarding/defender-for-endpoint-module-deployment"},{"title":"CrowdStrike Falcon Detection and Response Modules","href":"/guides/onboarding/crowdstrike-detection-and-response-modules"},{"title":"SentinelOne Detection and Response Modules","href":"/guides/onboarding/sentinelone-module"},{"title":"Sumo Logic Detection Module","href":"/guides/onboarding/sumo-logic-module"}]},{"group":"Fleet Management","pages":[{"title":"Workspace Profiles: Standardize Workspace Settings","sidebarTitle":"Workspace Profiles","href":"/guides/fleet-management/workspace-profiles"},{"title":"Onboarding Workspaces at Scale with CSV Import","sidebarTitle":"Onboarding Workspaces at Scale","href":"/guides/fleet-management/onboarding-workspaces-at-scale"}]},{"group":"Technical","pages":[{"title":"Enterprise Application Permissions and App IDs","sidebarTitle":"Enterprise Applications","href":"/guides/technical/enterprise-applications"},{"title":"Azure Resources Deployed for Sentinel and Agents","sidebarTitle":"Azure Resources Deployed","href":"/guides/technical/azure-resources-deployed"},{"title":"Auditing Enterprise App Permissions","sidebarTitle":"Audit Permissions","href":"/guides/technical/auditing-enterprise-app-permissions"},{"title":"Entity Insights","href":"/entity-insights"},{"title":"Defender for Endpoint Permissions and Consent","sidebarTitle":"Defender for Endpoint Consent","href":"/defender-for-endpoint-module"},{"title":"Defender for Endpoint Capability Matrix by License","sidebarTitle":"Defender Capability Matrix","href":"/guides/technical/microsoft-defender-capability-matrix"},{"title":"Defender AIR, ZAP, and Attack Disruption","sidebarTitle":"Defender Native Automations","href":"/guides/technical/microsoft-defender-native-automations"},{"title":"Sentinel and Defender XDR Incident Deduplication","sidebarTitle":"Incident Deduplication","href":"/guides/technical/parallel-incident-deduplication"},{"title":"How the CrowdStrike Falcon Integration Works","sidebarTitle":"CrowdStrike Falcon Integration","href":"/guides/technical/crowdstrike-falcon-integration"},{"title":"Incident Classification Mapping Across Vendors","sidebarTitle":"Classification Mapping","href":"/concepts/incident-classification"},{"title":"Configure Incident Webhooks","sidebarTitle":"Setting Up Webhooks","href":"/guides/technical/configure-webhooks"},{"title":"Setting Up SCIM Provisioning","href":"/guides/technical/scim-provisioning"}]},{"group":"Agent Center","pages":[{"title":"Agent Shifts: Schedule AI Agent Working Hours","sidebarTitle":"Agent Shifts","href":"/guides/agent-center/agent-shifts"},{"title":"Agent Run History","href":"/guides/agent-center/agent-execution-history"},{"title":"Agent Rule Reviews","href":"/guides/agent-center/rule-reviews"},{"title":"On Queue Agents for Defender for Endpoint","sidebarTitle":"Defender for Endpoint On Queue","mode":"default","href":"/guides/agent-center/defender-for-endpoint-on-queue"},{"title":"SOPs for Security Delivery Agents","sidebarTitle":"SOPs","href":"/guides/agent-center/operating-procedures"},{"title":"Agent Investigation Completed Webhook","href":"/guides/agent-center/agent-investigation-webhook"}]},{"group":"Content Management Center","pages":[{"title":"Content Management Center for Detection Rules","sidebarTitle":"Overview","href":"/guides/content-management-center/overview"},{"title":"Detection Rule Repositories","sidebarTitle":"Repositories","href":"/guides/content-management-center/repositories"},{"title":"Import, Version, and Deploy Detection Rules","sidebarTitle":"Rules","href":"/guides/content-management-center/rules"},{"title":"Detection Rule Drift and Workspace Coverage","sidebarTitle":"Workspace coverage and drift","href":"/guides/content-management-center/workspace-coverage"},{"title":"Detection Rule Change Requests and Approvals","sidebarTitle":"Change requests","href":"/guides/content-management-center/change-requests"},{"title":"Detection Rule Template Marketplace","sidebarTitle":"Marketplace","href":"/guides/content-management-center/marketplace"},{"title":"Microsoft Sentinel and Defender XDR Rule Platforms","sidebarTitle":"Sentinel and Defender","href":"/guides/content-management-center/platforms"}]},{"group":"General Support","pages":[{"title":"Submit a Support Ticket","href":"/submit-ticket"},{"title":"Workspace Onboarding Verification Checklist","sidebarTitle":"Onboarding Verification","href":"/guides/onboarding/workspace-onboarding-checklist"},{"title":"User Roles \u0026 Permissions","href":"/guides/general-support/roles-and-permissions-reference"},{"title":"User Management: Add Users and Groups","sidebarTitle":"User Management","href":"/guides/general-support/user-group-management"},{"title":"Service Accounts and API Keys","sidebarTitle":"Service Accounts","description":"Create service accounts for the ContraForce v2 API, authenticate with a client ID and secret, scope each credential, and rotate secrets with zero downtime.","href":"/guides/general-support/service-accounts"},{"title":"Cost Management Center","href":"/guides/general-support/cost-management-center"},{"title":"Offboarding: Remove ContraForce Apps and Resources","sidebarTitle":"Offboarding Procedure","description":"Offboard ContraForce by removing its enterprise apps from Microsoft Entra ID, Azure resources, role assignments, and any Azure Lighthouse delegation.","href":"/guides/general-support/offboarding-contra-force"},{"title":"Shared Teams Channel with the Success Team","sidebarTitle":"Shared Teams Channel","href":"/guides/general-support/contraforce-success-teams-channel"}]},{"group":"ContraForce and Compliance","pages":[{"title":"Meeting Cyber Insurance Requirements","sidebarTitle":"Cyber Insurance Requirements","href":"/guides/contraforce-and-compliance/contraforce-and-cyber-insurance"}]}]},{"tab":"API Reference","pages":[{"title":"API Reference","href":"/api-reference/endpoints"}]},{"tab":"Release Notes","pages":[{"title":"Release Notes","href":"/release-notes"}]},{"tab":"Blog","pages":[{"title":"Blog","href":"/blog"}]}]},"basePath":"","title":"Cost Management Center - ContraForce","buildId":"dpl_FWZhTb2vab28gFGFH4ojka6qEznQ","deploymentId":"dpl_FWZhTb2vab28gFGFH4ojka6qEznQ","dynamics":[],"chunks":[]}
