# How long until a new security tool stops being noisy?

Expect the first weeks to be the noisiest, and plan time for them; how quickly it settles depends on your network and on how quickly you mark what is normal. A behavioural tool compares each device with its own normal, and that normal takes time to learn: monthly jobs, month-end reports or a quarterly update may only appear after weeks. Meanwhile your own decisions do much of the quieting: every recurring harmless alert you confirm and mark is one that stops returning. Schedule a short daily review in the first weeks and a review of exclusions after the first month. Be wary of any promise that a tool is quiet from day one: it either has very few detections or hides what it is unsure of. NetSenX raises alerts as traffic flows from the start, improves its comparisons as it learns your network, and says plainly when your data does not yet support a false-positive bound.

FAQ: [Budget, staff and alert noise](https://netsenx.com/en/faq/budget) · https://netsenx.com/en/faq/how-long-until-a-new-security-tool-is-quiet

## Read next

- https://netsenx.com/en/pricing
- https://netsenx.com/en/ndr-for-small-business

## Related questions

- [How much time does a small team need to run NDR?](https://netsenx.com/en/faq/how-much-time-does-a-small-team-need-to-run-ndr)
- [How much should a small business spend on cyber security?](https://netsenx.com/en/faq/how-much-should-a-small-business-spend-on-cyber-security)
- [What security spending should a small company never cut?](https://netsenx.com/en/faq/what-security-spending-should-a-small-company-never-cut)
- [How do I calculate the cost of one day of IT downtime?](https://netsenx.com/en/faq/how-to-calculate-the-cost-of-one-day-of-it-downtime)
- [How do I justify a security tool to management?](https://netsenx.com/en/faq/how-to-justify-a-security-tool-to-management)