Skip to content

Licensing Guide

Logster is a commercial product. This page describes the three licensing tiers, the two deployment models, the hardware expectations for each model, and the ethical license enforcement policy.

For product-level positioning, see What is Logster. For licensing quotes, custom integrations, or professional services, contact the vendor directly.

Licensing tiers at a glance

Logster is sold in three tiers, all priced as yearly subscriptions:

Feature Proof-of-Concept Enterprise Premium
Deployment SaaS Lab only On-Prem or SaaS On-Prem or SaaS
Daily data volume 100 MB / day ≤ 10 GB / day Unlimited
Data sources Personal use only Unlimited Unlimited
License duration 15 days Yearly subscription Yearly subscription
Customer support Not included Included Included
Free deployment — — Included
Professional services — On-demand —

Proof-of-Concept

Use this to evaluate Logster quickly in a sandbox environment.

  • SaaS Lab access — hosted by the vendor.
  • Personal use only. No production traffic, no team sharing.
  • 100 MB / day ingestion cap.
  • 15-day license. After 15 days the environment is torn down.
  • No customer support included. Evaluate on your own; escalate to a paid tier if you need hands-on help.

Right for: individual engineers or security architects who want to try Logster end-to-end before recommending a purchase.

Enterprise

The mainline commercial tier for most customers.

  • Choice of On-Prem or SaaS deployment.
  • Up to 10 GB / day of ingested event data.
  • Unlimited data sources — bring as many collectors and integrations as you need within the data cap.
  • Yearly subscription.
  • Customer support included.
  • Professional services available on demand for bespoke work (custom integrations, model tuning, deployment assistance).

Right for: mid-sized security operations teams protecting up to several thousand endpoints.

Premium

The tier for large-scale enterprise deployments.

  • Choice of On-Prem or SaaS deployment.
  • Unlimited daily data volume.
  • Free deployment — the vendor installs and configures Logster for you.
  • Unlimited data sources.
  • Yearly subscription.
  • Customer support included.

Right for: large enterprises, managed security service providers, and customers with strict compliance or data-residency requirements.

Ethical license enforcement

All three tiers follow an ethical license enforcement policy:

Logster's license never interrupts real-time log ingestion or threat detection. Data volume limits are still applied in the background. Customers who record three or more license violations in a single calendar month are expected to contact Support to upgrade their plan.

In practice this means:

  • If your traffic briefly spikes above your tier's cap, Logster keeps detecting. You do not lose visibility because of a billing check.
  • License violations (over-cap ingestion events) are tracked and reported back to the vendor for billing review.
  • Three or more violations in the same calendar month triggers a conversation with Support about moving to a higher tier — not a cutoff.

Deployment models

Both Enterprise and Premium tiers let you choose between two deployment models. The choice is typically driven by data residency requirements and internal operations capacity.

On-Prem

  • Installed inside your own data center or cloud account.
  • Logs never leave your environment — strongest data privacy posture.
  • Real-time model updates delivered by the vendor.
  • You own:
    • Hardware (CPU / GPU for inference, storage for Kafka + ES).
    • IT staffing (deployment, monitoring, incident response).
    • Maintenance (patching, backups, upgrades).
    • Training (for analysts and operators).

Right when: data residency requirements are non-negotiable, or when your team already operates infrastructure at scale and prefers to keep detection inside your own perimeter.

SaaS

  • Hosted and operated by the vendor.
  • No maintenance hassle — no customer hardware, no ops burden.
  • Real-time model updates delivered by the vendor.
  • You own:
    • Endpoint collector deployment (Winlogbeat / Splunk UF / rsyslog / syslog-ng on your hosts).
    • Data source configuration and tuning.
    • Analyst workflow.

Right when: you want the fastest time-to-value, or when you do not have a dedicated platform team to run an on-prem Logster stack.

Feature parity

Both deployment models deliver the same detection capability — same models, same pipeline, same dashboard, same API. The difference is exclusively about who runs the infrastructure.

Hardware expectations

SaaS

Logster SaaS runs on NVIDIA RTX 4090 GPUs:

  • Ada Lovelace architecture
  • 16,384 CUDA cores
  • 24 GB GDDR6X VRAM, 384-bit memory interface
  • 82.6 TFLOPS of FP32 performance
  • 4th-gen Tensor Cores, 3rd-gen RT Cores
  • 450 W TDP, requires an 850 W+ power supply

You don't need to think about any of this as a SaaS customer — it's listed here so you understand the scale of inference hardware Logster is designed around.

On-Prem

Customers running the on-prem model at scale should provision comparable GPU hardware. For smaller deployments, Logster's code also supports CPU inference — set model.device: cpu in deploy/service-config.yaml. See Admin Guide: Installation Parameters.

Upgrading between tiers

You can upgrade between tiers at any time during your subscription. Reach out to Support to adjust your plan. Downgrades typically take effect at the next renewal.

If you record three or more license violations in a single calendar month, the vendor will contact you about moving to a higher tier. See the ethical license enforcement section above.

Where to go next

For licensing quotes, custom integrations, or MSSP licensing, contact the vendor directly.