NEXUS
Documentation menu

Docs · Reference

Editions & Licensing

Nexus Fleet is free to start. Pro and Enterprise unlock more agents and capabilities through cryptographically signed license tokens.

Editions

Free
Rp 0
  • 2 agents
  • Core detection rules
  • Dashboard & CLI
  • Community support
Pro
Rp 50/mo
  • Seat-based agents
  • All rules · FIM · Web audit · SCA · Vuln
  • Sigma import & Active Response
  • Reports · posture score · email support
Enterprise
Custom
  • Unlimited agents
  • mTLS · at-rest encryption · RBAC
  • Priority support & onboarding
  • Custom licensing

How licensing works

Pro and Enterprise features are unlocked by Ed25519-signed license tokens. Everything verifies the signature offline against a bundled public key — no phone-home at runtime. Without a valid token, the manager runs in Free mode (2 agents). A Pro token is seat-based (default 50 agents); Enterprise is unlimited.

You buy a single-use, device-locked code. Redeem it once — in the desktop app (Settings → License) or via the CLI — and it binds to that machine and issues the signed token. One token covers the GUI, the CLI, and Fleet on the same device(stored at ~/.nexus/desktop_license.txt), so you never need a second code.

bash
# inspect a token's contents (tier, seats, expiry)
nexus license info --token <LICENSE_TOKEN>

# point the CLI/Fleet at a token directly
export NEXUS_LICENSE=<LICENSE_TOKEN-or-file>

# hot-reload a token onto a running manager
nexus cli --token <ADMIN_TOKEN> apply-license --token <LICENSE_TOKEN>
Tamper-resistant by design. Because tokens are signed and device-bound, they can't be edited to grant more seats or copied to another machine — any change invalidates the signature and the system falls back to Free.

Get a license

Pricing is seat-based for Pro and custom for Enterprise (mTLS, at-rest encryption, RBAC, priority support). Reach out and we'll get you set up.

Contact sales
PreviousNexus Hub (content packs)