Tanium solutions and bundles are the commercial packages through which Tanium sells the modules of its platform. The Tanium Resource Center keeps a “Solutions & Bundles” matrix for each packaging generation. The current one is dated November 2025, with separate versions for Tanium Cloud and for on-premises deployments.[1][2] A licence entitles the customer to the solutions it names. In Tanium Cloud, Tanium imports and configures those solutions automatically, and some solutions need dependent solutions licensed as well.[8]
Editions
Current matrix (November 2025)
The matrix groups modules into four solution areas plus Endpoint Expansion. The table shows which bundle includes each module.[1]
| Module | Core Std | Core Plus | EM Std | EM Plus | ExM Std | ExM Plus | EASM | SecOps | Mobile | OT |
|---|---|---|---|---|---|---|---|---|---|---|
| Tanium Core, Automate, Discover, Engage | Yes | Yes | ||||||||
| Benchmark, Certificate Manager, Jump Gate | Yes | |||||||||
| Patch, Deploy, Performance, Connector for Microsoft Intune | Yes | Yes | ||||||||
| Provision, Enforce, Investigate | Yes | |||||||||
| Comply, SBOM | Yes | Yes | ||||||||
| Integrity Monitor, Reveal | Yes | |||||||||
| External Attack Surface Management, Attack Path Mapping | Yes | |||||||||
| Threat Response, Impact | Yes | |||||||||
| Endpoint Management for Mobile | Yes | |||||||||
| Core for OT, Exposure Management for OT | Yes |
The bundles do not include one another. Endpoint Management Plus, for example, does not contain Tanium Core, which is a separate Core bundle in the matrix.[1] Tanium Asset, Connect, Interact, Reporting and Trends are listed as modules of the Tanium Core Platform, together with shared services such as Client Management, Direct Connect and Endpoint Configuration.[6]
Product descriptions
- Tanium Core Standard and Core Plus provide real-time endpoint data, visibility and automation. Plus adds the ability to manage risk and track user sentiment.[1]
- Endpoint Management Standard covers patching, third-party software deployment and performance monitoring. Endpoint Management Plus adds provisioning, policy enforcement and issue investigation.[1]
- Exposure Management Standard covers vulnerability exposure and runtime SBOM. Exposure Management Plus adds compliance configuration risks and sensitive data findings.[1]
- Security Operations covers threat hunting, forensics and remediation. Security Operations plus HuntIQ adds expert-led threat hunting.[1] HuntIQ Enhanced Support is also listed as an offering. Its terms are in an addendum covering Tanium Threat Response.[1][9]
Metrics
All bundles in the four solution areas count by Endpoint under the License Usage Terms.[7] The Endpoint Expansion offerings state their own units:[1]
| Offering | Unit | Constraint |
|---|---|---|
| Endpoint Management for Mobile | Device | iOS, iPadOS, ChromeOS and Android |
| Core for Operational Technology | OT Satellite | Up to 250 OT Devices per satellite |
| Exposure Management for Operational Technology | OT Satellite | Up to 250 OT Devices per satellite; requires Core for OT |
| External Attack Surface Management | Endpoint | Add-on; requires an equal number of Tanium Comply licences |
Catalog: Endpoint Management for Mobile is licensed by Device; Each OT Satellite may monitor up to 250 OT Devices; Exposure Management for OT requires Core for OT.
Counting / floors
Prerequisites and equivalence. EASM is sold as an add-on to Exposure Management Standard, Exposure Management Plus or Tanium Comply, and needs an equal number of Tanium Comply licences.[1] A customer that licenses EASM for fewer endpoints than its Comply count, or the reverse, is outside the stated rule. Exposure Management for OT needs Tanium Core for Operational Technology.[1] The Endpoint Management for Mobile requirements also call for a Tanium licence that includes Tanium Enforce.[11] In the current matrix, Enforce is part of Endpoint Management Plus.[1] Catalog: EASM requires an equivalent number of Tanium Comply licences.
OT. OT devices ingested through Tanium Endpoint Management for Operational Technology do not count against endpoint licensing totals. The OT Satellite is the licensed unit.[10] Catalog: OT devices do not count against endpoint totals.
Mixed bundles. The matrix does not say whether bundle quantities must match across solution areas. For example, it is silent on whether Endpoint Management can be licensed for fewer endpoints than Core. Only the EASM rule states an equivalence.[1] Quantities are set per offering in the Quote or Schedule.[7]
Virtualization & partitioning
The bundles follow the general Endpoint rules: virtual devices are Endpoints, and a hypervisor-level install counts as one Endpoint.[7] See Tanium endpoint counting and License Usage Terms.
Cloud / BYOL
Each Tanium Cloud bundle has a ”- Tanium Cloud” name, and most also have a ”- Tanium Cloud for US Government” variant.[1] The on-premises matrix uses the suffix ”- Subscription”, for example “Tanium Core Standard - Subscription”.[2] Differences between the two:
- EASM and Attack Path Mapping appear only in the Tanium Cloud matrix.[1][2]
- Security Operations plus HuntIQ and HuntIQ Enhanced Support have no US Government variant in the Cloud matrix.[1]
Catalog: On-premises bundles are sold as "- Subscription" offerings.
Programs
Earlier packaging generations
Customers renewing older contracts may hold entitlements under names that are no longer sold. Tanium keeps the earlier matrices online.
- Before September 2023: suites. Examples are Tanium Operations Suite (Discover, Asset, Patch, Deploy) and Tanium Security Suite (Discover, Threat Response, Enforce). Others were Client Management, Risk & Compliance Assessment, Enforcement and Management, Sensitive Data Monitoring, Threat Hunting, Digital Employee Experience, and Unified Endpoint Management Essentials, Plus and Premium.[5]
- September 2023: Core X tiers. Core X1, X2 and X3 platform tiers sat alongside Endpoint Management, Risk & Compliance, Incident Response and Digital Employee Experience solutions. Tanium Standard, Professional and Enterprise bundles were sold at the same time.[4] Core X2 added a runtime SBOM and policy enforcement to Core X1. Core X3 added certificate tracking.[4]
- May 2025: Standard and Plus. Core, Endpoint Management and Risk & Compliance came in Standard and Plus tiers, alongside an Incident Response bundle.[3] In the November 2025 matrix, Risk & Compliance became Exposure Management and Incident Response became Security Operations, with similar module content.[1][3]
Catalog: Legacy suites map to named modules.
Out of scope
- Part numbers and prices. Tanium does not publish them, and reseller catalogues are not vendor sources.
- Tanium Atlas, which is metered separately in AI Credits. See Tanium Atlas AI credits.
- Third-party products resold by Tanium under their own agreements.