Issue
RSA-signed license blobs with org, product, tier, features, and expiry — bound to machine fingerprint.
Axix Hawk
Features
License lifecycle, agent, SDKs, and hardening — one platform
From issue to revoke to air-gapped verify — every control ISVs need after they ship.
License lifecycle
Issue, renew, revoke, and audit without rebuilding a license server.
Enforce
SDK feature gates talk to the local agent; offline verify with grace and air-gap TTL.
Renew
Push a new license — no reinstall. Reminders fire before hard cutoff.
Revoke
Kill-switch from the console; next heartbeat enforces, restart for immediate exit.
ON-PREM AGENT
Lightweight daemon on customer hardware
axix-agent verifies offline, heartbeats to Hawk, and exposes a local status endpoint — so your product never depends on a fragile custom checker.
- Install via install script
- license.axlic path configuration
- systemd-friendly service
- Status JSON for ops health checks
Operator touchpoints
Issue licenses, check agent health, and revoke from the console — no fragile custom checkers.
Issue license
Bind a signed blob to the machine fingerprint from the vendor console.
Check agent health
Read local status from the agent to confirm license state during bring-up.
Revoke in console
Kill-switch once; the next heartbeat enforces, restart for immediate exit.
Vendor dashboard capabilities
White-label ready on Enterprise — seats, clients, products, licenses in one console.
Products & tiers
Define products, feature flags, and entitlement tiers.
Client orgs
Isolate each end-customer with its own licenses and users.
Revoke & renew
One-click kill-switch and renewal without site visits.
Audit trail
Append-only log of every generate, revoke, and anomaly.
Webhooks
Push lifecycle events to billing and support tools.
Deploy analytics
Pro+ dashboards for heartbeat and license health.
Deployment modes
Same crypto controls — pick the connectivity model your customer requires.
Hybrid
Online heartbeats with offline grace — default for most on-prem ISVs.
Online
Tight revoke windows for SaaS-on-prem tiers that can reach the platform.
Air-gapped
Fully offline verification with offline TTL for plants and OT floors.
Webhooks & API
HMAC-signed events and REST + JWT/JWKS for runtimes beyond the client SDKs.
license.issued
Fire when a new hardware-bound license is created.
license.revoked
Sync billing and support when kill-switch fires.
license.expired
Drive renewals and dunning from your own stack.
license.renewed
Confirm push of a new blob without reinstall.
Hardening pipeline
Runtime and image controls that sit beside licensing — not as an afterthought.
Real-time heartbeat & revoke
Products phone home. Revoke once — every instance stops within one heartbeat cycle. Grace period for offline clients.
Distroless Docker + seccomp
No shell, no package manager, syscall whitelist. Images signed with cosign; unsigned containers refuse to start.
JWT / Keycloak auth
SSO for end users. Tokens bound to machineId — valid JWT on the wrong hardware is rejected.
RSA-signed license file
Signed blobs with org, product, tier, features, expiry. Embedded public key — no server needed to verify offline.
Capabilities you can turn on
Enable the modules that match your product definition — leave the rest off until you need them.
- Licensing, kill-switch, and expiry controls
- Auth, audit, webhooks, and white-label
- Runtime detection and air-gap options
Live vs pipeline — labeled clearly
Ship with confidence knowing which modules are production-ready today.
- Core licensing stack is live
- OT SIEM and SOAR marked as pipeline
- Early access paths for Enterprise buyers
Deep links into every module
Each capability has its own page with adoption steps and FAQ depth.
- Product pages for every module
- Solution plays for buyer motions
- Docs entry points for operators
Try the feature set yourself
Start a free trial and enable the modules you care about first.
- Create a product definition quickly
- Issue a bound license
- Practice revoke before go-live
Features FAQ
Core licensing, kill-switch, hardening, auth, expiry, audit, agent, SDKs, webhooks, white-label, air-gap, and runtime detection are live. OT SIEM/SOAR are pipeline.
See every capability page
Deep-dive each module — or jump straight to a demo.
Product visuals
Three console views and three real-world moments for this page — each with a full caption.
Console view for Features: license inventory, bind status, and org filters in one workspace. Operators scan Active versus Revoked rows, confirm machine fingerprints, and jump into a client without leaving the grid. Search and column controls keep large fleets readable. This frame is unique to this page so the visual story matches the URL you opened.
Second dashboard for Features: heartbeat health, revoke timing, and anomaly hints sit side by side. Use it to brief security on what “one heartbeat” looks like before a PoC. Charts stay light-themed with navy accents for Axix Hawk. Nothing here is reused from another marketing route.
Third console moment for Features: deployment analytics and seat pressure across client orgs. Leaders see where licenses concentrate and where renewals are due. Export-friendly layout supports review packs. Paired with this page’s copy so buyers never see a generic stock screen.
People moment one for Features: practitioners reviewing Hawk controls in a real workspace. The scene grounds licensing talk in day-to-day operations instead of abstract icons. Lighting and wardrobe stay professional and brand-safe. Captured specifically for this page’s narrative so visitors never confuse it with another product route.
People moment two for Features: collaboration around ship-or-hold decisions after a revoke drill. Teams align on evidence — bind failure, kill-switch timing, audit export — before a customer demo. Atmosphere matches Axix Hawk’s light navy product language. Unique to this route’s gallery.
People moment three for Features: field or office context for how this capability lands with buyers. Use it to show human stakes behind machine-locked software. Composition avoids logos and keeps faces secondary to the work. Written and imaged only for the Features page experience.