Per agent. Public. Predictable.
Monthly billing. No seat fees, no ingestion overage, no surprises.
Get started - no card required.
- Up to 5 agents
- All detection & response features
- 7-day telemetry retention
- Community support
- Single tenant
For small teams running their own SOC.
- Up to 20 agents
- All detection & response features
- 30-day telemetry retention
- Email support
- Single tenant
For mid-size orgs with a dedicated SOC.
- Up to 50 agents
- Everything in Starter
- 90-day telemetry retention
- Priority support, best-effort SLA
- SSO, SCIM, fine-grained RBAC
- Custom detection content
For large fleets and complex environments.
- 50+ agents
- Everything in Business
- 1-year telemetry retention
- Priority support with direct escalation
- Custom contract & SLA
- Direct access to the founding team
Prices in GBP, exc. VAT. Monthly billing. Server and workstation agents priced the same - no silent multipliers.
What you'd pay extra for elsewhere.
| Feature | LightEDR | Typical incumbent |
|---|---|---|
| Threat hunting queries | Included | Add-on SKU |
| Telemetry retention | Included | Add-on SKU |
| Response playbook engine | Included | Add-on SKU |
| SSO / SCIM | Business & Enterprise | Enterprise tier |
| API access | Included, unlimited | Rate-limited |
| Multi-tenant console | Included | Separate product |
The honest answers.
What counts as an endpoint?
Any machine running the agent - server, workstation, VM, container host. We don't charge per-OS or per-CPU.
Are containers counted?
No. The agent runs on the host; containers ride free.
What happens after the trial?
The trial tenant stays read-only for 30 days so you can export data. No auto-billing, ever.
Can I self-host?
Yes. Self-hosting your own organisation's endpoints is permitted on all tiers. If you're an MSSP looking to manage endpoints for your clients, that requires a separate commercial agreement - contact partners@lightedr.com.
Is there an open-source tier?
Not today. The full product is source-available under the Elastic License 2.0 (ELv2) - you can read, audit, and self-host freely. Production use for your own organisation is permitted. Offering it as a managed service to third parties requires a commercial agreement.
How are you cheaper?
Smaller team, no SDR army, no marketing tax. And a genuinely lighter product - we pass that saving through.
More questions about licensing, self-hosting, and compliance? See full FAQ →