Data Limits
The following table provides a comprehensive list of limits for the features:
Feature | Limit | Additional Information |
---|---|---|
Pinned Modules in Menu | 8 | You can pin a maximum of 8 modules in the Menu. |
Opened Tabs | 50 | You can open a maximum of 50 tabs for the modules simultaneously. |
Module Field | ||
Description | 30,000 bytes | You can add up to 30,000 bytes of text in the description field of the modules. This feature is available in Respond v3.3.4 onwards. |
Custom fields | 10,000 | You can add up to 10,000 characters in custom fields of a module. This feature is available in Respond v3.4.0 onwards. |
Incidents | ||
Playbooks | 45 | You can run a maximum of 45 playbooks in an incident. |
Impacted Business Units | 60 | You can add a maximum of 60 impacted business units in an incident. |
Impacted Locations | 105 | You can add a maximum of 105 impacted locations in an incident. |
Connected Vulnerabilities | 500 | You can connect a maximum of 500 vulnerabilities to an incident. |
Modules | ||
Reports | 975 | You can create a maximum of 975 reports in a Respond tenant. |
Widgets per Report | 50 | You can include a maximum of 50 widgets in a report. |
Knowledge Base Articles | 7500 | You can create a maximum of 7500 Knowledge Base articles. |
Characters per Knowledge Base Article | 25000 | You can include a maximum of 25000 characters in a Knowledge Base article. |
Threat Briefings | 750 | You can create a maximum of 750 threat briefings. |
Threat Actors | 1500 | You can create a maximum of 1500 threat actors. |
Malware | 1500 | You can create a maximum of 1500 malware. |
Custom Modules | 3 | You can create a maximum of three custom modules. |
Saved CQL Queries | 200 | You can create a maximum of 200 saved CQL Queries in a module. NoteEach user can create a maximum of 20 CQL Queries per module. These limits are applicable inRespond v3.4.3.3 onwards. |
Dashboards | ||
Widget Cards (Hero Cards) per Dashboard | 20 | You can include a maximum of 20 hero cards in a custom dashboard. |
Widgets per Dashboard | 150 | You can include a maximum of 150 widgets in a custom dashboard. |
Columns | 3 | You can include a maximum of three columns in a row. |
Custom Dashboards per User | 30 | A user can have up to 30 custom dashboards, including both dashboards they create and those shared with them. |
Custom Widgets | 1000 | You can create a maximum of 1000 custom widgets in the widgets library. |
Bulk Export | ||
Export Formats | XLS, XLSX, HTML, and JSON | You can obtain the maximum number of records in XLS and XLSX files in one zip file. |
Number of Records | 100000 | You can export up to 100000 records simultaneously. |
Records in an export file | 25000 for XLS, XLSX | One XLS or XLSX file can have a maximum of 25000 records. If you export 50000 records, one zip file is created with two files with 25000 records each. |
Attachments | ||
Attachment Size | 100 MB | You can attach a file of size up to 100 MB. |
Attachments | 150 | You can attach a maximum of 150 files in a module entry. |
Notes | ||
Characters per Note | 200000 | You can add a maximum of 200000 characters in a note. |
Connect the Dots | ||
Connected Modules | 600 | You can connect a maximum of 600 objects in a module. |
Incident Workflows | ||
Active Incident Workflows | 50 | You can create a maximum of 50 active incident workflows. However, there is no limit to the number of inactive and draft incident workflows. This limit is available in Respond v3.3.4 onwards. |
Phases | 10 | You can add up to 10 phases in an incident workflow. |
Fields | 2000 | You can create up to 2000 fields including Character, Integer, Date-Time, Single-select, and Multi-select. This limit is available in Respond v3.3.5.5 and higher versions. |
Parent Parameters | 4 | You can add a maximum of four parent parameters for workflow mappings. |
Mapped Actions | 300 | You can map a maximum of 300 action templates in an incident workflow. |
User Group Management | ||
User Groups | 150 | You can create a maximum of 150 user groups. |
User Management | ||
Active Users | As per the number of users defined in the license. | |
SLA | ||
Assignment SLA | 105 | You can create a maximum of 105 active assignment SLAs each for incidents and actions. |
Resolution SLA | 105 | You can create a maximum of 105 active resolution SLAs each for incidents and actions. |
Notification SLA | 105 | You can create a maximum of 105 active notification SLAs for incidents. |
Open API | ||
Open APIs Credentials | 100 | You can create a maximum of 100 active open API credentials. |
Roster Management | ||
Rosters | 100 | You can create a maximum of 100 rosters. |
Shift Models | 100 | You can create a maximum of 100 shift models. |
Template Management | ||
Export Templates | 50 | You can create a maximum of 50 export templates each for incidents, actions, devices, and users. |
Merge Templates | 50 | You can create a maximum of 50 merge templates for incidents. |
Rule Engine | ||
Rules | 150 | You can create a maximum of 150 rules. |
Configurations | ||
Logo size | 160*38 px | Ensure that the logo size is within 160*38 px with a transparent background in |
Password Reuse | 100 | Users are restricted from reusing any of their last 100 passwords. |
Password Reset Interval | 3650 days | After the password reset interval time expires, Respond requests will request users to change the password. |
Sign in Attempts | 100 | Users are locked after reaching the maximum number of sign-in attempts. |
Password Length | 128 characters | The password length should be between 8 to 128 characters. |
Currency |
| |
Concurrent Sessions | 2 | You can simultaneously use Respond in two different browsers or machines. |
Incident Reopen | 90 days | Refers to the time limit within which a closed incident can be reopened. |
Slack Channels | 1 | You can configure only one Slack channel to receive incident updates. |
Inactivity Timeout | 8760 hours | You can configure the inactivity timeout between 1 and 8760 hours. |
Login Session Timeout | 365 days | You can configure the login session timeout between 1 and 365 days. |
Automatic Account Deactivation | 3650 days | You can configure the automatic account deactivation time between 1 and 3650 days. |
Settings | ||
Locations | 750 | You can add a maximum of 750 locations. |
Location Fields for Geographic Locations | 15 | You can add a maximum of 15 location fields. Limits for each field type are:
|
Sources | 300 | You can add a maximum of 300 sources. |
ATT&CK Navigator | ||
Layers | 20 | You can create a maximum of 20 layers in each Mobile and Enterprise ATT&CK matrices. |
Pinned Layers | 3 | You can pin a maximum of three layers. |
Fang Defang | ||
Characters | 1000 | You can include a maximum of 1000 characters to fang or defang a list of URLs, IP addresses, or domains. |