Is there anything to pay?

Nothing. Talon Studio is in beta as a free Community Edition, on the key that comes with your Talon Labs account; Enterprise is in development and not on sale.

What does the AI cost?

Whatever your provider charges: your Claude subscription through the Claude Code engine, a metered API key, or nothing at all on a local model. Talon Labs adds nothing to it and never meters a model call.

Only to ask whether a new release is out, and to fetch its notes when one is — a check that sends nothing about the install, and that TALON_DISABLE_UPDATE_CHECK=true turns off. A Community key is checked on your own server and is never activated or checked in; only an Enterprise key checks in.

What if an Enterprise key lapses?

The instance returns to Community, within Community's limits. Nobody is locked out and nothing is deleted.

TALON STUDIO · PRICING

Talon Studio, on your own hardware.

Detection engineering as code — coverage, validation and releases to your own SIEM. Two editions: Community, on the key that comes with your Talon Labs account, and Enterprise, in development.

Community

The whole detection workflow, for a small team and one SIEM.

No charge

Beta · key with your account

Get your free Community key

2 users

1 workspace

1 SIEM connection

1 deployment target, deploying from main

2 API tokens, read-only

Detection-as-code — Sigma and native queries, in Git

ATT&CK coverage, rule health, attack replay, and Claw — the AI detection agents

9,000+ library rules from five public catalogues

Runs on the Community key that comes with your Talon Labs account — checked on your server, never activated or checked in

Bring your own AI — runs on your Claude subscription (Claude Code), a metered API key, or a local model. Talon Labs never meters your model calls.

Best-effort support through the contact form

Enterprise

For larger teams, several SIEMs, and MSSPs.

In development

Not on sale yet

Everything in Community, plus

More users, workspaces, SIEM connections and deployment targets

Deploys from any branch

Single sign-on with OIDC — Google, GitHub and Microsoft Entra ID

Federated search across SIEMs

SOC and MSSP console — triage across workspaces

ServiceNow integration

Curated content packs

API write scopes and the outbound MCP server

SAML single sign-onIN DEVELOPMENT

SCIM provisioningIN DEVELOPMENT

A support agreementIN DEVELOPMENT

A key with your account

Your Community key for each product comes with a Talon Labs account. It never expires. It is checked on your own server, and never activated or checked in.

Never read-only

Nothing locks and nothing is deleted. Enterprise raises the limits, and in Talon Studio adds the features marked Enterprise.

A key that lapses

If an Enterprise key expires or is revoked, the instance returns to Community. Everyone in it keeps signing in.

One licence

Both products ship under the Talon Labs Community Edition Licence: no charge for Community, and not open source.

Enterprise is not on sale yet — tell us what you would need from it and we will write when it is. Register interest. Read the licence.

BEFORE YOU INSTALL

The money questions

What people ask before they install, answered in their own words. Every answer is checkable in the docs.

Is there anything to pay?: Nothing. Talon Studio is in beta as a free Community Edition, on the key that comes with your Talon Labs account; Enterprise is in development and not on sale.
What does the AI cost?: Whatever your provider charges: your Claude subscription through the Claude Code engine, a metered API key, or nothing at all on a local model. Talon Labs adds nothing to it and never meters a model call.
Does it phone home?: Only to ask whether a new release is out, and to fetch its notes when one is — a check that sends nothing about the install, and that TALON_DISABLE_UPDATE_CHECK=true turns off. A Community key is checked on your own server and is never activated or checked in; only an Enterprise key checks in.
What if an Enterprise key lapses?: The instance returns to Community, within Community's limits. Nobody is locked out and nothing is deleted.