Tenable Enclave Security Licensing

This topic breaks down the licensing process for Tenable Enclave Security. It also explains how assets are counted, lists add-on components you can purchase, and describes what happens during license overages or expirations. To learn how to use Tenable Enclave Security, see the Tenable Enclave Security User Guide.

Important! To purchase Tenable products, contact your Tenable Representative.

Licensing Tenable Enclave Security

To use Tenable Enclave Security, you purchase licenses based on your organizational needs and environmental details. Tenable Enclave Security assigns those licenses to your assets, which are assessed hosts from Container Security or Security Center.

Note: Tenable offers simplified pricing to managed security service providers (MSSPs). To learn more, contact your Tenable representative.

Tenable Enclave Security Products

The following table lists Tenable Enclave Security products that require licenses, along with the asset type licensed.

Product	Asset Type
Tenable Security Center	Assessed hosts from Tenable Security Center or imported from other Tenable products.
Container Security	Assessed container images. For more information, contact your Tenable representative.

Reclaiming Licenses

When you purchase Tenable licenses, your total license count is static for the length of your contract unless you purchase more licenses. However, Tenable Enclave Security products reclaim licenses under some conditions—and then reassign them to new assets in the same product so that you do not run out of licenses.

The following table explains how each Tenable Enclave Security product reclaims licenses.

Exceeding the License Limit

To allow for usage spikes due to hardware refreshes, sudden environment growth, or unanticipated threats, you can temporarily exceed your license limits in Tenable Enclave Security:

Tenable Security Center - You can temporarily exceed your licensed IP address count by 10%. If you exceed this number, Tenable Security Center is disabled.

Tenable Enclave Security Container Security - When you scan more assets than you have licensed, Tenable clearly communicates the overage and then reduces functionality in three stages:

Scenario	Result
You scan more assets than are licensed for three consecutive days.	A message appears in Tenable Enclave Security.
You scan more assets than are licensed for 15+ days.	A message and warning about reduced functionality appears in Tenable Enclave Security.
You scan more assets than are licensed for 45+ days.	A message appears in Tenable Enclave Security; scan and export features are disabled.

Tenable Enclave Security generates a warning in the user interface when you approach or exceed the license limit.

Tip: Improper scan hygiene or product misconfigurations can cause scan overages, which result in inflated asset counts. To learn more, see Scan Best Practices.

Expired Licenses

The Tenable Enclave Security licenses you purchase are valid for the length of your contract. 30 days before your license expires, a warning appears in the user interface. During this renewal period, work with your Tenable representative to add or remove products or change your license count.

After your license expires, you can no longer sign in to the Tenable platform.

License and Blade Statuses

Tenable Enclave Security uses a platform licensing service to manage and report license state across all blades. The following tables describe the statuses you may see in the Tenable Enclave Security user interface or licensing API.

License Statuses

The following table describes the possible statuses for your overall Tenable Enclave Security license.

Status	Description
Valid	The license is within its expiration date and all licensed blades are operational.
Exceeded	You have exceeded your licensed asset count. Tenable Enclave Security generates a warning in the user interface. If the overage continues, functionality is progressively reduced. For more information, see Exceeding the License Limit.
Locked	The license enforcement ID (cluster ID or namespace ID) does not match the current deployment. No blades are accessible until the license is re-applied with the correct ID.
Expired	The license expiration date has passed. You can no longer sign in to Tenable Enclave Security. Contact your Tenable representative to renew.

Blade Statuses

Each blade has its own independent status within the platform licensing service. The following table describes the possible statuses for each blade.

Status	Description
Valid	The blade is licensed and fully operational.
Exceeded	You have exceeded the licensed asset count for this blade. Functionality is progressively reduced the longer the overage continues. For more information, see Exceeding the License Limit.
Locked	The blade's license enforcement ID does not match the current deployment. The blade is inaccessible until the license is corrected.
Expired	The blade's license has passed its expiration date. The blade tile is hidden from the dashboard, and API requests to the blade return a 403 Forbidden error. Contact your Tenable representative to renew.

Note: If you navigate directly to a blade URL while that blade's status is Locked or Expired, Tenable Enclave Security redirects you to the dashboard.