A teaching lab has more machines than a small law firm. Most "education editions" cap you at a handful of sources, which is enough to see the login screen and nothing else. Chronolith's academic licence is uncapped.
Detection engineering is about what you can see. A tool that silently drops events past its fifth log source teaches students that the console being quiet means the network is quiet — which is the single most expensive habit a security professional can learn. Chronolith's academic licence lifts the limit entirely, so a lab of thirty virtual machines behaves like a lab of thirty virtual machines.
Students get the full surfaces: detection and correlation, file access history, the investigation workflow, and the operational intelligence pages. Not a cut-down trainer — the product.
Chronolith is on-premises by design. It installs on a VM in your existing lab — VMware, Hyper-V, Nutanix AHV or plain Linux — and ships no telemetry anywhere. There is no cloud tenant to provision, no data-processing agreement for your institution's counsel to review, and no student data leaving the building. For a teaching environment that is one fewer approval to chase before term starts.
Included: uncapped log sources, the full detection and investigation feature set, and renewal each academic year. Issued to a named faculty sponsor at an accredited institution.
Not included: the evidentiary outputs. Compliance reports, the insurance renewal pack, containment notices and chain-of-custody exports are watermarked as academic and are not valid for submission to an auditor, an insurer, a regulator or a court.
That line is deliberate and we would rather state it than leave it to be discovered. The academic licence is for teaching, not for monitoring the campus. If your institution wants Chronolith watching its own estate — and schools and universities are squarely who we build for — that is a normal deployment, and we would genuinely like to talk about it. It is simply a different licence from the one your students learn on.
No high-mindedness about it: a security professional specifies the tools they learned on, and we would like to be one of them. Giving the classroom away is the cheapest honest way to earn that, and it is what every serious vendor in this field already does. The difference is the cap — ours isn't there.
We also get something we cannot buy: a room full of people trying to break it on purpose, every semester, on hardware we have never seen. That is better testing than we could pay for.
Tell us the institution, the department and the course. Academic licences are issued to a named faculty sponsor and renewed each academic year.
Request an academic licence →