Tanium licensing is the set of terms under which Tanium sells its endpoint management and security platform. Tanium publishes two base agreements: an End User License Agreement for subscriptions to on-premises software and a Subscription Agreement for Tanium Cloud, the hosted service formerly called Tanium-as-a-Service.[4] A third document, the License Usage Terms, sets how licences are measured, tracked and reported. It applies to all Tanium products, on premises and in Tanium Cloud, wherever a quote, schedule or order form references it.[1]
The unit is generally the Endpoint or the OT Satellite, and some offerings also carry usage-based fees. Quantities and restrictions are set in the Quote or Schedule.[1] Both agreements grant a non-transferable, non-exclusive licence for a term and for internal use only.[2][3] Tanium publishes no price list. When a customer buys through a Reseller, pricing, discounts and payment terms are governed only by the agreement with that Reseller.[2]
Editions
Tanium sells its modules in bundles. The matrix current since November 2025 has four solution areas, each mostly in a Standard and a Plus tier: Core, Endpoint Management, Exposure Management and Security Operations. Endpoint Expansion offerings cover mobile devices and operational technology (OT). An External Attack Surface Management (EASM) add-on is sold for Tanium Cloud.[5]
| Solution | Tiers | Main modules | Unit |
|---|---|---|---|
| Core | Standard, Plus | Core, Automate, Discover, Engage; Plus adds Benchmark, Certificate Manager, Jump Gate[5] | Endpoint |
| Endpoint Management | Standard, Plus | Patch, Deploy, Performance, Connector for Microsoft Intune; Plus adds Provision, Enforce, Investigate[5] | Endpoint |
| Exposure Management | Standard, Plus, EASM add-on | Comply, SBOM; Plus adds Integrity Monitor, Reveal[5] | Endpoint |
| Security Operations | One tier, optionally with HuntIQ | Threat Response, Impact[5] | Endpoint |
| Endpoint Management for Mobile | One tier | iOS, iPadOS, ChromeOS and Android management[5] | Device |
| Core / Exposure Management for OT | One tier each | OT discovery; OT vulnerability and compliance[5] | OT Satellite |
Most offerings come in a Tanium Cloud version and a Tanium Cloud for US Government version.[5] Catalog SKUs record each bundle, for example Tanium Core Standard and Tanium Endpoint Management Plus. Tanium publishes no part numbers or prices for them. Module membership, older suites and the on-premises names are covered in Tanium solutions and bundles.
Metrics
| Tanium term | Catalog row | Definition |
|---|---|---|
| Endpoint (Managed OS Instance) | Endpoint | A physical or virtual hardware device where Tanium software can be installed and which can process data. A hypervisor is one Endpoint when the Service is installed at hypervisor level.[1] |
| OT Satellite | OT Satellite | An Endpoint the customer selects to monitor OT Devices in the same network segment, such as a subnet or VLAN.[1] |
| Device | Device | Unit for Tanium Endpoint Management for Mobile, which is “licensed by Device”.[5] |
| AI Credit | AI Credit | Usage metric for Tanium Atlas in Tanium Cloud. A blended rate of 10,000 AI tokens per Credit.[1][8] |
| Service instance | Tanium Cloud instance | Tanium Cloud includes one service instance by default. More can be bought.[1] |
Catalog: Tanium products are licensed per Endpoint or per OT Satellite.
Counting / floors
The License Usage Terms split Endpoints into two kinds by Total Uptime. Total Uptime runs from first registration with the Tanium Console to the most recent “Last Seen” time. A Standard Endpoint exceeds 24 hours of Total Uptime at some point in the Subscription Term. An Ephemeral Endpoint has 24 hours or less.[1] A Standard Endpoint stays in the licence count for 30 days after its last observed registration, even if it has been re-imaged or wiped.[1] Disaster recovery endpoints count even when they are brought online only for testing.[1]
The product documentation applies the same 30-day window. Tanium Cloud and the on-premises Tanium Server treat an endpoint as managed if its Tanium Client registered in the past 30 days.[6][7] Devices ingested through an entity provider, such as the Tanium Connector for Microsoft Intune, have no Tanium Client and do not count towards licensed endpoint totals.[6]
Tanium publishes no general minimum quantity. The only published cap is on OT: each OT Satellite may monitor no more than 250 OT Devices.[5] An on-premises licence sets a Maximum Managed Endpoints figure. When the managed count exceeds it, Tanium Console shows a warning. Once the excess passes 10 percent, the Console also tells the administrator to contact Tanium Support.[7] Worked rules and edge cases are in Tanium endpoint counting and License Usage Terms. Catalog: Standard Endpoints keep counting for 30 days after last registration; The Console counts an endpoint as managed if its Client registered in the past 30 days; Exceeding Maximum Managed Endpoints triggers a Console warning.
Virtualization & partitioning
Tanium has no processor, core or partitioning metrics. Virtual machines are Endpoints in their own right. The one exception: when the Service is installed at hypervisor level, the hypervisor is a single Endpoint.[1] VDI endpoints count and are classed as Ephemeral or Standard.[1] The Tanium Client guide says each VDI instance that is created or re-imaged counts as a licensed endpoint for at least 30 days. It gives a sizing formula that adds the instances created or re-imaged over a 30-day period to the persistent estate.[11] Catalog: A hypervisor counts as one Endpoint when the Service is installed at hypervisor level; VDI endpoints count and are classified as Standard or Ephemeral; Tanium licence formula for VDI environments.
Cloud / BYOL
Tanium publishes separate agreements for on-premises software and for Tanium Cloud.[4] None of the published documents grants a bring-your-own-licence right to move entitlements between the two, so the deployment model is fixed by the Schedule. In Tanium Cloud, Tanium manages the licence automatically. Adding solutions or raising the maximum number of managed endpoints goes through Tanium Support.[6] On premises, entitlements sit in a licence file (tanium.license). Its validity period starts when Tanium generates the file, not when the customer activates it.[7] If the Tanium Cloud licence lapses before renewal, the customer cannot access Tanium Cloud.[6] If an on-premises licence lapses, the customer cannot import, export or update any Tanium solution.[7] Tanium Atlas, an AI feature of Tanium Cloud, is metered in AI Credits on top of the endpoint subscription. See Tanium Atlas AI credits.[1]
On-premises customers can run the platform on Tanium Appliances. Those are bought under separate Hardware Terms, which do not cover the Licensed Software.[10] Catalog: Tanium appliance purchases do not include software licences.
Programs
- Evaluation. Evaluation Software is free and limited to lab, demonstration, evaluation, training and testing use. It runs for the period in the welcome email or licence key notice, or 30 days if none is stated.[2]
- Tanium Cloud for US Government. A version of the Service offered only to Eligible Customers, with extra data and administrator restrictions.[3]
- Free AI Credits. From 2026-08-03 each Tanium Cloud environment receives a monthly allocation of Atlas credits at no extra charge.[1]
- Supplemental support. Enterprise Supplemental Support provides a named enterprise support resource. Enhanced Technical Support supplements standard support for Severity 3 cases. Both are bought for a set term.[9]
Contract terms
Standard Support Services are included with each licence for the licence term.[2] Unless a Schedule says otherwise, fees are billed annually in advance and due 30 days after invoice.[2] Licences renew automatically only when the Schedule says so. In that case either party can stop renewal by written notice at least 30 days before the Renewal Term.[2] When an on-premises licence ends, the customer must uninstall the software.[2] When a Tanium Cloud subscription ends, Tanium deletes or returns Customer Data under the Data Processing Addendum.[3] The two agreements are compared in Tanium EULA and Cloud Subscription Agreement. Catalog: Automatic renewal applies only when the Schedule says so; Fees are billed annually in advance unless the Schedule says otherwise; On expiry or termination the on-premises software must be uninstalled.
Audits and compliance
Both agreements let Tanium audit use no more than once in any 12-month period, during the term and for one year after. As part of an audit Tanium may ask for a system-generated deployment report, which the customer must provide within 30 days. The customer must complete remediation, including buying more licences, within 30 days after the final audit report.[2][3] Because the deployment report comes from the platform itself, the Console’s managed endpoint count is the starting point for an internal licence position. The licence documentation shows how to read that count from Client Status, filtered to the last 30 days with duplicate host names hidden.[6] Catalog: Tanium may audit once in any 12-month period, by deployment report.
Out of scope
- Prices, discounts and part numbers. Tanium does not publish them, and reseller orders follow reseller terms.
- Signed enterprise agreements and public-sector contract vehicles, which override the web terms and were not retrievable.
- Third-party products resold by Tanium (Google Chronicle, Cyware, Deep Instinct, ScreenMeet), which have their own agreements.[4]
- Country-specific terms in Part 2 of each agreement, such as the German modifications.