Red Canary is licensed on a per-endpoint basis. Our approach to measuring license usage is rooted in being as fair and transparent as possible. We have refined this approach over years to cover as many use cases as possible, including:

• Standard corporate environments where users are given laptops and/or workstations.
• Heavily virtualized environments where users are using virtualized/VDI desktops.
• Corporate datacenters comprised of servers that are rarely replaced.
• Cloud computing environments where servers are often replaced several times per month.

Viewing recent license usage

The number of servers and workstations online is recorded on a monthly basis.

To view your usage:

1. Click your Profile > License Usage
2. Monthly usage is shown in the Historical usage section
3. Click ICON_DOWNLOAD to download a CSV of your endpoint usage.

What happens when I exceed my license amount?

Most importantly, we continue processing data received from all your endpoints. In no case do we want an increase in usage to harm your security.

To remove the majority of overages, we give you a grace amount where we simply forgive any small overages that often happen in the course of your business growing. Cheers to that!

To further simplify this process, we look at your usage every three months and true everything up at that time. If you had an overage beyond that grace amount, we calculate that overage and you can either increase your license amount (prorated for the remainder of your contract) or you can pay a one time overage. Increasing your license count is a good way to take advantage of volume discounts when available.

How is usage calculated?

We treat workstation operating systems differently than server operating systems for optimum fairness.

Servers. In each month, we calculate the daily maximum number of servers that we received data for. This "high water mark" approach removes most overages you would incur by replacing servers, refreshing VDI infrastructure, etc.

Workstations. In each month, we calculate the total number of workstations that we processed data for during that month. This fairly accounts for systems that have accumulated data without internet connectivity during periods and then requires Red Canary to process that data when the system comes back online.

What if something doesn’t add up or seem right?

Sometimes you encounter an edge case: you refreshed every single endpoint in a single month, and the numbers here just don't look right. To make it easier to identify those oddities, the download links above let you obtain the data that you need to run these to ground.

If something still doesn't look right, let us know and we'll get to the bottom of it.