Included
- One organization and one local workspace
- Founder-assisted deployment and synthetic onboarding
- Authorized or sanitized Wazuh JSON/NDJSON imports
- Defined alert-volume boundary and limited support
- Backup/restore verification, midpoint review and final findings summary