Licensing

You are free to evaluate the Analytics Engine (AE) for 30 days upon activating your API key. During the evaluation period, the unique daily endpoint count for your environment is calculated and displayed through the Licensing tab within our Splunk app and web console. You can also use our API directly to retrieve this information. We track the daily endpoint count through the evaluation period, and calculate the licensing cost using the 90th percentile value, as below.

Endpoint Definition and Count

For the purposes of licensing, an endpoint is a unique source IP address generating egress events which are processed by AE. An endpoint can be a workstation, server, virtual machine, container, or other type of asset or device with an IPv4 or IPv6 address. We count the number of endpoints generating telemetry on an hourly basis, and use the single largest hourly “high watermark” value each day as the daily unique endpoint count. Counting in this manner ensures that roaming users and short-lived cloud compute resources are not counted multiple times.

Pricing Tiers

The table below describes the AlphaSOC pricing tiers for AE licensing. The illustrations in the below detail low-level licensing calculations and the way in which the tiers are used in practice.

Endpoint Count	Annual Cost
1-1000	$18.00 per endpoint
1001-5000	$9.00 per endpoint
5001-25000	$6.00 per endpoint
25001+	$3.00 per endpoint

Illustration 1: The 90th percentile daily endpoint count is 3,000. The annual term license cost is $36,000 (the first 1,000 endpoints billed at $18.00, and the following 2,000 at $9.00 for the year). The license agreement has a 3900 endpoint limit, providing 30% of additional free capacity to burst during the annual term without penalty.

Illustration 2: The 90th percentile daily endpoint count is 5,800. The annual term license cost is $58,800 (the first 1,000 endpoints billed at $18.00, endpoints 1,001-5,000 at $9.00, and 5,001-5,800 at $6.00 for the year). The license agreement has a 7,540 endpoint limit, providing 30% of additional free capacity to burst during the annual term without penalty.

Licensing Notes

Please note the following with regard to licensing and pricing:

• All AlphaSOC licenses have a 12-month term and are invoiced upfront
• The minimum daily unique endpoint commitment is 500
• Pricing is consistent for on-premise and cloud AE deployment options
• We provide a 30% discount for both non-profit and academic institutions