● BetaExclusive limited-time access — Claim your seat →
Licensing

One key. Your entire fleet.

GirginOSVM uses Ed25519-signed license keys with a lightweight heartbeat. Customers get a clear self-service portal; administrators get a full operator console — issue, revoke, monitor and pin entitlements without leaving the panel.

How it works

Sign, send, serve.

1 — Key issued

Admin issues an enterprise-grade key bound to a plan and optional server fingerprint.

2 — Heartbeat

Your node POSTs counters every 60s to /api/public/license/verify. No PII is sent.

3 — Signed reply

Backend returns an Ed25519-signed verdict the node can re-verify offline for 72h grace.

Two surfaces, one source of truth

Pick your view.

For Customers

Self-service licensing

  • View every license key with plan, status and expiry.
  • Bind a license to a server IP / hostname in one click.
  • See live heartbeats and last-seen status per node.
  • Copy an install snippet ready for your terminal.
  • Receive update notifications with rollback-safe ack.
For Administrators

Operator console

  • Issue, edit and revoke keys with audit-logged changes.
  • Pin entitlements (modules, limits) per license.
  • Review tamper reports, bans and abuse signals.
  • Force-suspend or extend grace windows in real time.
  • Drill into per-license fingerprints and usage samples.
Live demo key

Try the verify endpoint right now

A real Enterprise license, valid for 90 days, is already seeded in the database. Run the snippet below — the response is signed.

curl -sS https://girginos.net/api/public/license/verify \
  -H 'content-type: application/json' \
  -d '{
    "license_key": "GVM-LIVE-DEMO-A7K2P9Q3M5X1",
    "fingerprint": "demo-host:01",
    "hostname":    "demo.local",
    "agent_version": "v2026.5.167",
    "counters": { "node_count": 1, "vm_count": 3 }
  }'
Key
GVM-LIVE-DEMO-A7K2P9Q3M5X1
Plan
Enterprise
Status
active (90d)
Ed25519 signed

Every verdict is signed. Nodes verify offline with embedded pubkeys.

72h grace

Lose contact with the issuer? Service continues for three days.

Rate-limited

Per-key + per-IP buckets reject probing and replay attacks.