Every capability ships compiled into the same container. A license key unlocks Pro at runtime - no separate download, no reinstall.
Genuinely useful on its own - not a crippled trial.
Cancel any time - your instance keeps working as Free if a subscription lapses. Nothing breaks, nothing locks you out.
| Capability | Free | Pro |
|---|---|---|
| pcapng & pcap parsing (timestamp-resolution aware) | ✓ | ✓ |
| Per-packet decode - Ethernet/IPv4/IPv6/ARP, TCP/UDP/ICMP, DNS, HTTP, TLS (incl. certificate details) | ✓ | ✓ |
| Aggregate analysis - protocols, talkers, conversations, DNS/HTTP/TLS breakdowns | ✓ | ✓ |
| Batch analysis (up to 20 files, 4 concurrent) & file comparison | ✓ | ✓ |
| Exports - JSON, multi-sheet CSV, per-finding pcap | ✓ | ✓ |
| 29-detector anomaly engine, per-finding annotations | - | ✓ |
| Watched-folder auto-ingest | - | ✓ |
| Multi-user proxy auth mode | - | ✓ |
| Upload size cap | 1000 MB | 5120 MB |
| History retention | 25 items | Unlimited |
One license unlocks Pro on one self-hosted instance - your server, your data, your instance. There's no per-seat counting and no phoning home beyond a periodic license check.
Your instance drops back to the Free tier automatically - nothing breaks, nothing locks, no data is lost. Resubscribe any time to unlock Pro again.
Pro purchases receive a full refund when requested within 14 days of purchase, no questions asked. Email [email protected] with your license key.
No. Captures are parsed and stored entirely on your own instance. The one exception is license validation - a small periodic check against our license server, containing no capture data. The application sends no usage telemetry or analytics.