Which product tier provides the customer only limited Trusted Circles queries and no Performance Analytics for SecOps?

The Standard tier for the Security Incident Response (SIR) product is designed to provide essential features for incident management while limiting some of the advanced capabilities offered in higher tiers. In this tier, customers have access to only a limited number of Trusted Circles queries, which are used to gather information from trusted sources during incident investigations. Additionally, the absence of Performance Analytics indicates that users in the Standard tier do not receive advanced reporting and metrics capabilities that help in assessing the efficiency and effectiveness of security operations.

This structure is purposefully designed to meet the needs of organizations that may be starting to implement security incident response processes but do not require the comprehensive features available in the Professional or Enterprise tiers. The Professional and Enterprise tiers typically include enhanced features like unlimited queries and robust analytics, which cater to more mature security operations or larger organizations with advanced needs.

Thus, the Standard tier aligns with a basic level of incident response functionality, offering limited capabilities suitable for customers looking for foundational features without the complexities of more extensive performance monitoring and analytics tools.