Most packs include a short-term but unrestricted enterprise license that allows you to run THOR or SPARK on any end system within an organisation. (the default licensing includes only host-based licenses; unrestricted enterprise licenses are more expensive)
Each license pack is offered at an attractively low price.
The Right Package for Every Mission
We offer license packs for the following scenarios:
- Incident Response Cases
- Compromise Assessments (enterprise wide / single system)
- Digital Forensics Engagements
The license packs are the perfect solution for:
- Incident Response Teams
- Security Service Providers
- CERTs / CSIRTs
- Digital Forensics Specialists
- SOC Teams
After purchasing one or more license packs, we create an account in our customer portal in which you can issue a license right when you need it. It also has a “Downloads” section in which you find the scanner software, guides and signature information.
For example, when you purchase 3 “Incident Response” license packs, you’ll get 3 full and unrestricted enterprise licenses of THOR and SPARK, each of them with a validity of 30 days from the issue date.
You also receive 15 host-based licenses with a validity of 5 days each which you can issue and use for all types of testing and lab scanning.
You can use THOR for Windows and SPARK for Linux and OSX system scans. Both scanners contain our huge signature database and allow you to integrate your own IOCs and YARA signatures in an unencrypted or encrypted form.