FAQ

Common questions, straight answers.

Licensing, self-hosting, pricing, and partner use - everything we get asked most.

Pricing & Plans

How does pricing work?

Per agent, per month, billed in GBP. Free up to 5 agents. Starter is £5/agent/mo (up to 20), Business is £4/agent/mo (up to 50), Enterprise is £3/agent/mo for 50+. No seat fees, no ingestion overage, no silent multipliers.

What counts as an agent?

Any machine running the LightEDR agent - server, workstation, VM, container host. We don't charge per-OS or per-CPU. Containers on a monitored host don't add to your count.

Is there a free tier?

Yes. Up to 5 agents, 7-day telemetry retention, all detection and response features included. No card required.

What happens when I hit my agent limit?

New enrollments are blocked. You'll see a warning in the dashboard before you reach the cap. Upgrade to the next tier to add more agents.

Are there contracts or commitments?

No. Month-to-month, cancel any time. Enterprise terms are negotiated as part of your agreement.

Licensing & Source Code

What licence does LightEDR use?

The Elastic License 2.0 (ELv2). You can read, audit, modify, and self-host the source code freely. Production use for your own organisation is permitted on all tiers.

What does ELv2 not allow?

Offering LightEDR as a hosted or managed service to third parties - i.e., running it on behalf of your clients and giving them access to its features. This is the "hosted/managed service" restriction in ELv2 § Limitations.

Can I modify the source code?

Yes. You can fork and modify for your own internal use. You must include prominent notices of your modifications in any distributed copies. Modified versions inherit ELv2's restrictions - you can't strip the license from a fork.

Do I lose warranty protection if I modify the source?

ELv2 provides no warranty regardless. The licensor's liability is disclaimed in full under the "No Liability" clause. If you're running a modified build in production, your commercial agreement (if any) governs support obligations.

Self-Hosting

Can I self-host LightEDR?

Yes. Self-hosting your own organisation's endpoints is permitted on all tiers. We ship a Helm chart; you bring the Kubernetes. See the Docs for the self-hosted deployment guide.

Does self-hosted use require a license key?

No license key is required for self-hosted deployments running your own endpoints. If you need an air-gapped deployment with a signed license JWT (common in regulated environments), contact us.

Can I self-host and manage endpoints for my clients?

No - not under the standard license. Managing endpoints for third-party clients is a managed-service use case that ELv2 withholds. It requires a separate commercial partner agreement. Contact partners@lightedr.com to discuss terms, or see the MSSP solutions page for the multi-tenant architecture.

Security & Compliance

Is LightEDR SOC 2 certified?

SOC 2 Type II is on our roadmap - we're working through the audit now. Contact us if a report is needed to unblock your evaluation.

Where is data stored?

UK (Manchester, uk-1) for all SaaS tenants. Self-hosted deployments keep data wherever you run them. EU region planned - contact us if this is blocking your evaluation.

Can I get a sub-processor list?