Simple Tiers.
No Surprises.
Evaluate freely. Build internally at no cost. Pay when you ship to customers — and only then. No lock-in, no kill switches, no kernel drivers that phone home.
Three Tiers, One SDK
Every tier ships the same headers, the same event schema, and the same samples. The difference is the driver signature and what you can do with it.
- ✓ Full SDK headers and samples
- ✓ Test-signed x64 + ARM64 drivers
- ✓ GitHub download, no form required
- ✗ Production-signed drivers
- ✗ Internal or production deployment
- ✗ Redistribution to customers
- — Support: none
- ✓ Full SDK headers and samples
- ✓ Production-signed x64 + ARM64 drivers
- ✓ No testsigning mode required
- ✓ Internal deployment on machines your org owns or leases
- ✗ Redistribution to your customers
- — Support: best-effort via support@heathensoftware.com
- ✓ Full SDK headers and samples
- ✓ Production-signed x64 + ARM64 drivers
- ✓ No testsigning mode required
- ✓ Internal deployment
- ✓ Redistribution to your end customers
- ✓ Email support, 2-business-day response — support@heathensoftware.com
Labs, Universities & Startups: Apply for Free Access
If you’re doing security research, running an academic program, building a student project, or an early-stage startup that needs to prove out an integration before committing to a license — the beta program was designed for you.
Labs, universities, and researchers
Full SDK with production-signed drivers. Deploy in your lab or on machines you own. Publish freely — papers, blog posts, and research that evaluate or reference Heathen are explicitly allowed. No endpoint limit for academic and lab use. In exchange, a 30-day written check-in.
Early-stage startups
Full SDK with redistribution rights for up to 50 endpoints. Deploy to your own customers to prove out the integration. Those 50 endpoints are perpetually licensed regardless of what happens with your subscription — they keep running forever. Growth beyond 50 endpoints transitions to the Startup commercial tier.
No NDAs required. You can talk about Heathen publicly from day one. Applications are reviewed personally and responded to within two business days.
Priced by Endpoint Volume
An endpoint is a Windows machine with Heathen drivers actively installed and running. Pricing is per year, billed annually. Founding customers lock in these rates for their first two renewal cycles.
| Plan | Endpoint limit | Annual price | Support |
|---|---|---|---|
| Startup | Up to 1,000 endpoints / year | $1,800 founding | Email, 2-business-day response |
| Growth | Up to 10,000 endpoints / year | $9,600 founding | Email, 2-business-day response |
| Scale | Up to 100,000 endpoints / year | Contact us | Negotiated |
| Enterprise | Unlimited | Contact us | Negotiated |
Beta pricing. Current prices reflect our beta period. Customers who sign before the end of 2026 lock in these rates for their first two annual renewals. Full pricing will be announced before it takes effect.
Plain English
These are the concepts that matter most. Full license agreements are provided before download (Tier 2) or before invoicing (Tier 3).
What “signed” means for you
Heathen drivers are signed through the Microsoft Hardware Dev Center. They load on standard Windows 10/11 without enabling test-signing mode or disabling Secure Boot. Your customers get a normal, unmodified Windows installation.
Tier 2 deployment scope
You may deploy Tier 2 drivers to Windows machines your organization directly owns or leases — your development machines, your own infrastructure, your own security monitoring. Deploying to your customers’ machines, or to endpoints you manage on behalf of others, requires a Commercial license.
What the Commercial license unlocks
Redistribution means shipping Heathen driver binaries as part of your product to your end customers. This includes MSPs and MSSPs deploying to client environments. Tier 3 is required for any deployment to machines outside your own organization.
How we count
An endpoint is a distinct Windows machine on which Heathen drivers are installed and running during the subscription year. Development and test machines used by your own engineering team do not count toward your endpoint limit.
What happens if you don’t renew
Endpoints deployed during an active subscription term are licensed in perpetuity to run the version of the SDK deployed at that time. If you do not renew, you may not deploy to new endpoints and you lose access to updates and support — but existing deployments keep running. We do not build kill switches into kernel drivers.
What renewal covers
Your annual subscription covers the right to make new deployments, access updated driver and library versions, and receive technical support. Renewals are annual. No auto-charges — we invoice and you pay before the next term begins.
Licensed, not sold
Heathen driver binaries are licensed, not transferred. The license is personal to the named organization. You may not sublicense, resell, or transfer the binaries outside the scope of your tier. Commercial redistribution to end customers is permitted only under an active Tier 3 subscription.
Why we don’t need them
Kernel drivers that phone home or require periodic license checks are a security risk, an air-gap problem, and a reliability hazard. We enforce compliance through audit rights in the commercial agreement, not through software mechanisms. Your deployments run regardless of our server status.
Academic and publication rights
Beta Research Partners may publish papers, blog posts, and other research that evaluates, describes, or references Heathen without prior approval. Redistribution of driver binaries outside your lab or academic institution is not permitted under this track. Contact us if your use case is unclear.
The 50-endpoint perpetual grant
Startup Beta partners receive redistribution rights for up to 50 endpoints. Those endpoints are licensed in perpetuity for the SDK version deployed during the beta — they do not expire when the beta ends or if you do not convert to a paid tier. Growth beyond 50 endpoints requires a Commercial license.
Start with the Dev Kit
The dev kit is free, production-signed, and gets you to real events in under 20 minutes. Fill out a short form and we’ll respond within one business day.
Request Dev Kit Access → Or download the test-signed lab release from GitHub with no form required.