License Management¶
As the Org Admin of a parent account, to allocate licenses among your clients, select the Clients >
On the Infrastructure tab shown here, the large tiles at the top show license availability and usage in four categories – overall assets, RBEM (Risk-Based Exposure Management), Rapid Response, and Tripwires:
-
Your organization's total license count.
-
The number and percentage allocated to clients as a group.
-
The number and percentage tested.
-
The number and percentage available to allocate.
The WebApps tab works similarly, but shows your availability and allocation of WebApp FQDNs (fully qualified domain names). NodeZero treats each FQDN as one licensable application.
Allocations Across Clients¶
The License Management page's bottom table shows you the number and percentage of allocated assets or applications (WebApps) that each client has tested. Here, it is important to:
-
Monitor the percentage of (allocated) assets or WebApps that each client has scanned. Consider allocating headroom well above current usage.
-
Monitor your organization's total number of tested assets, and the number available to allocate, in each of the four categories shown above. Reach out to your Horizon3 account manager to proactively acquire additional licenses when needed.
Keep in mind these overall constraints on allocating licenses:
-
The number of licenses you can allocate to all clients (combined) is limited by the total pool of licenses purchased and held by the parent account.
-
Separately, granting each client access to Tripwires, Rapid Response, or RBEM features draws down the parent account's pool of licenses for the corresponding feature.
Tripwires, Rapid Response, and RBEM Access¶
This section is specific to asset licenses (corresponding to the Infrastructure tab in the above screenshot).
For each client, beyond setting the number of assets that can be scanned, you can also assign access to NodeZero Tripwires, Rapid Response, and the RBEM feature set. The RBEM (Risk-Based Exposure Management) package includes Insights, Threat Actor Intelligence, High-Value Targeting, Advanced Data Pilfering, and Vulnerability Risk Intelligence.
All or nothing
Selecting the check box for any of these features applies that feature to all assets allocated to this client.
Permissions around these features are subject to some restrictions:
-
Org Admins within each client can see that client's Tripwires, Rapid Response, and RBEM toggles, and these Admins can manage these features only on that client.
-
Only Org Admins, or users designated by the Org Admin for the client account, are enabled to see Notifications for the account, and to see the NodeZero Portal's Tripwires tab.
Updating Client Allocations¶
From the License Management page, you can finely manage clients' license allocations in two ways:
-
Click an individual Client Name to update that client.
-
Select check boxes for multiple clients, then click the Update button to manage them as a group.
Either option will open a version of the Edit Client(s) modal shown below. Here, you can choose how restrictively to allocate assets to the selected client(s), and can control their access to additional products.
Dynamic or Fixed Allocations¶
In the modal shown above, a parent account's Admin can allocate licenses to clients in two ways:
-
Dynamic allocation flexibly allocates more licenses from the parent's pool as the client consumes its allocation. These clients will be able to run pentests uninterrupted (subject to your overall licenses limit).
-
Fixed Allocation assigns a specific number of assets or WebApps. This unlocks the Assets Allocated field, where you specify the quantity.
Enabling new clients
Newly created clients start with zero licenses allocated. To enable them to run tests, you must either specify a count of
Selecting Fixed Allocation also unlocks two other options that you can select independently:
-
Enforce Allocation makes your Fixed Allocation a hard limit, preventing further testing unless you allocate more licenses. If you leave this check box cleared, it overrides that limit and essentially makes the
Fixed Allocation work like a Dynamic allocation. -
Overage Warning shows client Admins in-product warning banners, beginning when their tesing has consumed 70% of their allocated licenses. (Whether or not you select this option, you – as the parent Admin – receive email warnings when clients reach usage thresholds.)
A third option in this modal is available with either Dynamic or Fixed Allocation:
- Restrict ability to run pentests stops the selected client(s) from testing, regardless of their unused license allocation. This is a hard brake.
Products Enabled¶
The Edit Client(s) modal's Products Enabled section provides three additional check boxes, through which you can provide or deny clients' access to NodeZero products beyond pentesting.
As outlined in Tripwires, Rapid Response, and RBEM Access, this is an all-or-nothing decision: Selecting any of these check boxes allocates your pool's licenses on the corresponding product to all of the assets you've allocated to the client(s).
Providing access is subject to license availability in your parent pool. Therefore, selecting a check box that shows 0 assets available doesn't actually enable the product for this client, until you replenish your pool.
How Asset Reallocation Works¶
A parent account's Admin can reallocate licenses among clients. See Allocations Across Clients and reallocation details in
Increasing or decreasing the number of licenses allocated to a client also depletes or restores your pool of any additional package features you've enabled on that client.
Licensed Inventory¶
You can examine your overall inventory of Infrastructure assets. At the NodeZero Portal's upper right, click your user profile. From the resulting drop-down, select Settings, then select the Licensed Inventory tab.
The table here shows details about each asset's name, IPs, host names (where specified), OS, applied templates, count, and date last seen. As shown below, the Filter button enables you to narrow down the displayed assets by:
- Internal.
- External.
- Date range.
- Current Contract Term authorization.
Click the Filter modal's Apply button to modify the display. The pagination controls at the page's lower-left corner will show the total count of assets matching your current filter conditions.
To view all your total assets again, reopen the Filter modal and click Clear.
