License
Sensitive Data Scanner uses offline license files. There is no phone-home and no internet access required - validation happens locally against a public key baked into the application.
Running without a license
An installation with no licence file runs a five-day evaluation. Scans cover the first 1000 issues, run on a single worker, and do not read attachment contents. The License page shows the days remaining in a banner.
The five days are counted from the oldest data in the database - the earliest audit event, scan run or finding - not from a licence record, so removing the stored licence does not restart the clock.
When the evaluation ends the product behaves exactly as it does with an expired licence: everything already scanned stays readable, and no new scan starts until a licence is installed.
Installing a license
Licenses are issued as encrypted .prslic envelopes. Open
Administration -> License, choose the file you were sent in the
Encrypted license file (.prslic) field, and press Upload; there is no
text to paste. The page then shows the current license status, including
customer, validity period, signature status, and enabled features.
Validation behavior
- The license signature is verified with the built-in public key; tampered or invalid licenses disable licensed features.
- The licence is not bound to the configured Jira base URL. Changing the Jira domain does not require a new licence.
- An expired license switches the product to read-only mode: existing findings remain accessible, but new scans cannot be started.
- License uploads and changes are recorded in the audit log.
Licensed features
The license file enables named features. Two exist today:
| Feature | Meaning |
|---|---|
SCAN | Running scans at all. |
SCAN_ATTACHMENTS | Reading the contents of Jira attachments during a scan. |
The License page lists the features your installed license enables.
If a scan configuration has attachment scanning
enabled but the license does not include SCAN_ATTACHMENTS, the scan still runs
normally over issue fields and comments - attachments are simply not read - and
the run reports:
Attachment scanning is not included in your license; attachments were not scanned.
A missing feature never fails a scan. It narrows one.
Tiers
Paid licences are issued per company and renew yearly. One licence is valid for a single legal entity and can be used for any number of scanner installations within it. A licence continues to work if an installation is pointed at a different Jira base URL.
Licences issued by older versions that contain a Jira base URL remain valid. The URL is verified as part of the legacy signature, then ignored rather than used as an entitlement constraint.
Every paid licence covers an unlimited number of issues, comments and attachments. There is no per-licence issue quota - not as a tier difference, and not as a number inside the licence file. The only issue cap the product has is the unlicensed evaluation's 1000 per scan, described above. See Pricing. Renewing the licence is a license file replacement - no reinstallation.