- Billed by
- Fortify 24x7, each month ahead of the period covered
- Statement descriptor
- FORTIFY 24X7
- Evaluation window
- Fourteen days after the opening charge, returned whole
- Afterwards
- Cancel on any day; the watch stays up until the bought month expires
- Contact
- soc@s1xdr.com
Fourteen days in which to decide this was not the right fit, then a single rule that applies to every month thereafter. There is no retention desk, no phone tree, and no clause that only shows itself on the way out.
The opening fortnight
Should S1XDR turn out not to suit your environment, tell us inside 14 days of the opening charge and that month comes back whole. There is no form, nobody will ask why, and you are not required to demonstrate that you deployed anything.
Be aware of one honest asymmetry: detection tiers need agents on machines and, on XDR, connectors authorized before there is anything to judge. If you want the trial window to be a real evaluation rather than a formality, deploy in the first few days and tell us so we can prioritize your tuning.
Every month after the first
Cancel on whichever day suits you. Doing so switches off the next renewal. The month you already bought remains yours and the watch keeps running until it lapses, rather than dropping the second you click. We do not prorate part months, with two exceptions granted without argument:
- Any situation where statute gives you a right to the money back.
- Any charge that was our mistake, whether a quantity we got wrong, an invoice raised twice, or a line that renewed after you ended it. Returned whole.
Dropping your endpoint count is a quantity edit, not a refund. It lands on your next invoice, never on one already taken.
The consequence of a refund
Money returned means the coverage it bought is over. Agent licenses switch off, the SOC drops your queue, and telemetry starts the teardown clock our platform vendors run.
If you need the case history for an insurer, an auditor, or a successor provider, ask before you cancel. We will export what we hold and, where an investigation is genuinely open, keep the tenant readable long enough for you to finish it.
Add-on modules and detection tiers
Each line is refunded on its own terms. Dropping a backup or allowlisting module does not disturb your detection tier, and stepping a detection tier down from XDR+ to XDR does not cancel anything else on the invoice. Backup lines carry the additional caution that restoring what you still need should happen before the line is cancelled, not after.
How to request one
Write to soc@s1xdr.com from the address on the account, quoting the receipt or invoice reference. The money goes back the way it came, usually arriving inside five to ten working days according to how quickly your bank moves.