Understanding Sensor Licensing

How does Cyberhaven license its Endpoint Sensor?

Cyberhaven provides the Subscription Sensor License for licensing the Endpoint Sensor. The Endpoint Sensor is installed on an Endpoint.

What is an Endpoint?

Endpoints are any physical or virtual device connected to a computer network, such as a server, laptop, desktop computer, or virtual machine on which the Cyberhaven Endpoint Sensor is deployed.

When is an endpoint “active”?

An Endpoint is counted as active when the Endpoint Sensor is installed and has generated a unique agent identifier and thereafter when the Endpoint Sensor has contacted the Cyberhaven Platform during the applicable measurement period.

What is a Subscription Sensor License?

A Subscription Sensor License is when you buy a defined number of licenses in advance for a defined period of time (subscription period). The minimum subscription period is one year.

How are Endpoints counted against a subscription license?

Cyberhaven calculates subscription license usage by averaging four consecutive weekly Endpoint counts. A weekly Endpoint count is determined by counting the total number of Endpoints that are consumed for the prior seven days. On a rolling basis, the prior four weekly Endpoint counts for each week are added together and divided by four. An Endpoint that has the Endpoint sensor installed in Week 1 and contacts the Cyberhaven Platform during Week 2 is counted in both Week 1 and Week 2. However, if the Endpoint sensor installed in Week 1 has no contact with the Cyberhaven Platform for the entire Week 2, that Endpoint sensor is not counted for Week 2.

Example: If the weekly Endpoint count for Week 1 is 15,000 Endpoints, Week 2 is 10,000 Endpoints, Week 3 is 17,500 Endpoints, and Week 4 is 14,000 Endpoints, the average would be calculated as follows: (15,000+10,000+17,500+14,000)/4 = 14,125 Endpoints.