CrowdStrike is extending the Falcon Flex model to our services offering to provide organizations with the flexibility and speed required to prepare for modern threats, as well as the Zero Dollar Flex Fund, which provides proactive services hours to strengthen incident readiness.

Cybersecurity risk is constantly evolving, as is the way organizations procure cybersecurity services. Hours-based services models are rigid and lag behind real-world threats that demand immediate response. Further, priorities around advisory, testing, platform operationalization, and training can shift as business requirements and threat conditions change.

The Falcon Flex model has become the blueprint for how modern organizations obtain cybersecurity services. With CrowdStrike Flex for Services, CrowdStrike is applying the same flexible consumption approach to our full portfolio of expert-led cybersecurity services. Customers draw down from a standalone services entitlement that can be applied across our services portfolio based on customers’ priorities and operational needs. This includes incident response, proactive security services, advisory, platform services, and training.

A More Flexible Model for Cybersecurity Services

Traditional services procurement assumes customers can define in advance exactly what expertise they will need and when they will need it. In practice, that is rarely how security events unfold in the real world. Organizations may need to increase support around incident readiness, redirect effort toward a new risk priority, or engage response expertise quickly when conditions change. Further, contracting delays, onboarding a new provider during a crisis, or uncertainty around response ownership can all slow action when seconds matter.

Flex for Services is built to reduce that friction by giving organizations a path to pre-arranged incident response coverage through CrowdStrike’s frontline experts. Customers gain access to elite expertise and a more adaptable way to consume CrowdStrike expertise over time, without requiring a new procurement cycle every time priorities shift. By extending the Flex model to services, CrowdStrike provides organizations with a more practical way to align services consumption to actual security requirements.

Incident response readiness is among the most immediate applications of Flex for Services. It supports a broader operating model in which organizations can use CrowdStrike expertise both before and during an incident, improving preparedness while ensuring trusted response capability is already in place. Flex for Services operates independently from CrowdStrike Falcon platform subscriptions and our standard services retainers, which caters to customers who want a committed response time or are working on larger projects.

Lowering the Barrier for Eligible First-Time Services Customers

CrowdStrike is also introducing the Zero Dollar Flex Fund to make it easier for qualifying new services customers to engage CrowdStrike for the first time.

For a limited time, qualifying new customers can access 200 hours of CrowdStrike Services at no initiation cost, including 160 hours of incident response and 40 hours of proactive services. This gives first-time services customers a direct path to CrowdStrike expertise through a standalone 12-month agreement, while preserving flexibility in how proactive services are applied to readiness and consulting priorities.

Customers can establish a committed response path in the event of an incident while also using proactive services to assess readiness, improve defenses, and strengthen operational preparedness. It is a practical way to begin working with CrowdStrike Services, particularly for organizations that want to start with expert support before making a broader platform commitment.

Extending the Reach of CrowdStrike Services Expertise

Flex for Services reflects a broader CrowdStrike view: The model that has proven effective for platform consumption should also be available for services consumption.

Falcon Flex is a way for customers to align security investment to changing requirements, reduce out-of-cycle procurement friction, and expand access to CrowdStrike capabilities over time. Flex for Services extends that same principle to expert-led services, giving organizations a more flexible way to engage CrowdStrike expertise across the security lifecycle.

The result is a fundamentally different model where cybersecurity services move at the speed of the threat, and organizations can engage the right expertise at the right moment without friction. First-time services customers get an easier entry point through the Zero Dollar Flex Fund. CrowdStrike expands the reach of its services portfolio by making expert support easier to access when organizations need it most.

This is the future of cybersecurity services, and CrowdStrike is leading the way.