License Requirements

For instructions on how to download the Tenable Enclave Security license key, see Download License Key in the Tenable Account Management guide.

This topic breaks down the licensing process for Tenable Enclave Security. It also explains how assets are counted, lists add-on components you can purchase, and describes what happens during license overages or expirations.

Important! To purchase Tenable products, contact your Tenable Representative.

Licensing Tenable Enclave Security

To use Tenable Enclave Security, you purchase licenses based on your organizational needs and environmental details. Tenable Enclave Security assigns those licenses to your assets, which are assessed hosts from Container Security or Security Center.

Note: Tenable offers simplified pricing to managed security service providers (MSSPs). To learn more, contact your Tenable representative.

Tenable Enclave Security Products

The following table lists Tenable Enclave Security products that require licenses, along with the asset type licensed.

Product Asset Type
Tenable Security Center Assessed hosts from Tenable Security Center or imported from other Tenable products.
Container Security

Unique image:tag combinations assessed by Container Security.

For more information, contact your Tenable representative.

Reclaiming Licenses

When you purchase Tenable licenses, your total license count is static for the length of your contract unless you purchase more licenses. However, Tenable Enclave Security products reclaim licenses under some conditions—and then reassign them to new assets in the same product so that you do not run out of licenses.

The following table explains how each Tenable Enclave Security product reclaims licenses.

Exceeding the License Limit

To allow for usage spikes due to hardware refreshes, sudden environment growth, or unanticipated threats, you can temporarily exceed your license limits in Tenable Enclave Security:

  • Tenable Security Center - You can temporarily exceed your licensed IP address count by 10%. If you exceed this number, Tenable Security Center is disabled.

  • Tenable Enclave Security Container Security - When you scan more assets than you have licensed, Tenable clearly communicates the overage and then reduces functionality in three stages:

    Scenario Result
    You scan more assets than are licensed for three consecutive days. A message appears in Tenable Enclave Security.
    You scan more assets than are licensed for 15+ days. A message and warning about reduced functionality appears in Tenable Enclave Security.
    You scan more assets than are licensed for 45+ days. A message appears in Tenable Enclave Security; scan and export features are disabled.

Tenable Enclave Security generates a warning in the user interface when you approach or exceed the license limit.

When the license is locked, Tenable Enclave Security changes product tile visibility in the interface:

  • Tenable Enclave Security hides the Security Center tile for non-administrator users because Security Center does not allow scan imports when the license is locked.

  • The Container Security tile remains visible because Container Security continues to allow deployment assessment scans for existing images.

Tip: Improper scan hygiene or product misconfigurations can cause scan overages, which result in inflated asset counts. To learn more, see Scan Best Practices.

Expired Licenses

The Tenable Enclave Security licenses you purchase are valid for the length of your contract. 30 days before your license expires, a warning appears in the user interface. During this renewal period, work with your Tenable representative to add or remove products or change your license count.

When the license expires, Tenable Enclave Security hides the Container Security tile.

After your license expires, you can no longer sign in to the Tenable platform.

License Statuses

Tenable Enclave Security uses a platform licensing service to manage and report the license state. The following table describes the statuses you may see in the Tenable Enclave Security user interface or licensing API.

The following table describes the possible statuses for your overall Tenable Enclave Security license.

Status

Description

Valid

The license is within its expiration date and all licensed blades are operational.

Exceeded

You have exceeded your licensed asset count. Tenable Enclave Security generates a warning in the user interface. If the overage continues, functionality is progressively reduced. For more information, see Exceeding the License Limit.

Locked

The license enforcement ID (cluster ID or namespace ID) does not match the current deployment. No blades are accessible until the license is re-applied with the correct ID.

Expired

The license expiration date has passed. You can no longer sign in to Tenable Enclave Security. Contact your Tenable representative to renew.