Licensing & Seats¶
Your BongoShield licence sets two things: which features your organization can use, and how many users (seats) you can have. You can see your current licence any time in Settings → Licence.
What's always included¶
Regardless of plan, every BongoShield organization gets the core platform:
- The daily security question login gate — the product's core mechanic
- Training and the content library
- Users, departments and roles
- Gamification (points, streaks, leaderboard)
- Dashboards, incident reporting, and the audit log
Plans add the higher-value capabilities on top of that core.
Plans and what each unlocks¶
Feature availability is enforced server-side and drives what the admin console shows or locks. The current plan tiers:
| Feature | Starter | Pro | Trial | Enterprise |
|---|---|---|---|---|
| Phishing simulations | ✅ | ✅ | ✅ | ✅ |
| PDF reports | ✅ | ✅ | ✅ | ✅ |
| Mail plugins (Outlook add-in / Roundcube) | ✅ | ✅ | ✅ | ✅ |
| Broadcasts (security popups) | — | ✅ | ✅ | ✅ |
| Browser extension | — | ✅ | ✅ | ✅ |
| LDAP / Active Directory directory | — | — | — | ✅ |
| AI features (AI-drafted content) | — | — | — | ✅ |
| Workshop insights | — | — | — | ✅ |
Notes:
- A Trial shows off the Pro feature set, time-limited.
- Enterprise unlocks everything — including the capabilities that lean on your own infrastructure (LDAP/AD) and AI.
- On-premise / un-provisioned installs with no licence row get every feature — feature-gating is a cloud-tier concern and never cripples an on-prem deployment.
Locked features in the console
If a plan-gated capability isn't in your plan, the console shows it locked — for example a plugin download reads "Upgrade to unlock" on Settings → Downloads. Upgrading your plan unlocks it without any reinstall.
Viewing your licence¶
Go to Settings → Licence. The status card shows:
- Status — Active, Grace period, or Expired
- Customer and Plan
- Expires and Days remaining
- Seats used (and the seat limit, if your plan is capped)
- Activated date
If the licence is missing or has expired past its grace window, the system becomes read-only — your data is never deleted; you regain write access as soon as a valid licence is in place.
Offline / air-gapped installs¶
On-premises or air-gapped deployments can activate without internet access: paste the signed licence token BongoShield issued into Apply an offline licence on the same tab. It's verified locally and its plan, seats and expiry take effect immediately.
Seats and enforcement¶
A seat is one active user. Your plan may set a seat limit (an unlimited plan shows no cap).
- Seat check on user creation. BongoShield checks the seat count before any new user is created — whether you add them manually, they auto-enrol via SSO/JIT, are provisioned over SCIM, or are bulk-imported from LDAP.
- Bulk imports warn first. The LDAP Pull users flow previews the count against your seats and warns you before it would exceed the limit, so you never blow past your licence by accident.
- Freeing seats. Deactivating or removing users frees their seats.
If you need more seats or a higher plan, contact BongoShield — payment is invoiced offline and the operator updates your plan, which takes effect immediately.