Heimdal Security — Licensing

Antimalware and firewall management.

Per active endpoint with antivirus enabled.

Block malicious DNS connections on and off the corporate network.

Per active endpoint with this module enabled.

Network-level DNS protection.

Monthly average DNS traffic converted into devices; see the planning formula.

Update operating systems and supported applications.

Per active endpoint with update monitoring enabled.

Deploy custom applications and packages.

Patch & Asset Management add-on, per enabled endpoint.

Requires Patch & Asset Management. Selecting this add-on also selects the base module; removing the base removes the add-on.

Detect and stop malicious encryption.

Per enabled endpoint; can coexist with another antivirus.

Temporary privilege elevation without permanent local admin rights.

Per endpoint; approved elevation requests are not the licence unit.

Control privileged accounts and sessions.

Based on administrator accounts and users; see the planning formula.

Allow and block applications using policies.

Per endpoint with application control enabled.

Protect email through Microsoft Graph.

Eligible active user and shared mailboxes with Exchange Online licences; resource mailboxes excluded.

Alternative email integration: selecting this option turns off the other one.

MX filtering and BEC fraud protection; Email Fraud Prevention is managed under the ATP licence.

Inbound mailboxes after merging accounts across domains; counted from 21 received messages per period.

Alternative email integration: selecting this option turns off the other one.

Remote assistance and device administration.

Peak concurrent sessions during the billing period.

Event context and response from one console.

Per active endpoint reporting telemetry.

Managed investigation and response delivered by Heimdal.

Per-endpoint subscription; included modules, telemetry and response permissions are quoted.