NodeRunner | Identity you can attest. Devices you can trust. Intelligence that follows policy.
Edge-native security & intelligence

Governed AI. Proven trust.

NodeRunner delivers policy-bound, auditable AI intelligence that begins with identity attestation and expands into continuous infrastructure, security, compliance, and workforce productivity insight — always under policy.

From visibility → protection → intelligence. At machine scale.

Built for cloud, edge, and air-gapped environments. Scale to thousands — then millions — of nodes.

Edge-native operations that actually scale.

NodeRunner turns every device into a sensor and a decision point — so you can see everything, enforce policy, and generate insight without central bottlenecks.

Talk to Sales

Observe

Real-time visibility across your fleet: systems, processes, network, peripherals, and activity.

  • Inventory that stays current
  • Telemetry built for scale
  • Evidence you can audit

Enforce

Move from “alerting” to control: stop risky behavior at the edge with policy-based actions.

  • Allow / deny / alert policies
  • USB controls & blocking
  • Tamper-resistant operations

Understand

Turn telemetry into intelligence: baselines, trends, correlations, and executive-ready reporting.

  • Behavior baselines per node/user
  • Cross-node anomaly detection
  • Compliance mappings & exports

Deploy Anywhere

Cloud, hybrid, or air-gapped. Built to run on real fleets across Windows, macOS, and Linux.

  • Cloud-managed or isolated mode
  • Multi-tenant ready (MSP)
  • Offline-first delivery options

How it works

NodeRunner deploys lightweight agents that run nanoservices locally. They observe behavior, score risk, and take actions immediately — then stream normalized events to analytics for dashboards and reports.

NODE → EDGE DECISION → AUDIT TRAIL → INSIGHT
  • Local-first decisions reduce latency and impact
  • Risk scoring prioritizes what matters
  • No ingestion tax or event-based pricing traps
  • Audit-grade timelines for compliance and IR
Outcome: fewer surprises, faster response, lower cost. NodeRunner helps IT and Security teams replace guesswork with continuous visibility, edge enforcement, and analytics that scale cleanly as your fleet grows.

Plans that scale from one node to a million.

Simple per-node pricing. Upgrade anytime. Annual billing includes savings and enterprise support eligibility.

Billing
Monthly
Save up to 15% annually
Core

Know what’s happening on every node.

Instant visibility across your fleet — hardware, software, network, and activity — delivered by lightweight agents that never sleep.

$6
/ node / month
  • Node activation & licensing (NodeZero)
  • Hardware & OS inventory
  • Process, service, and network enumeration
  • USB & peripheral detection
  • Basic fleet health dashboards
Secure

Actively reduce risk at the edge.

Move from observation to action. Secure enforces policy, detects threats, and stops risky behavior where it starts — on the node.

$18
/ node / month
  • Policy enforcement (allow/deny/alert)
  • Risk-scored nanoservices
  • USB control & blocking
  • Suspicious process / script detection
  • Incident timelines per node
Insight

Understand behavior. Predict risk. Prove compliance.

Transforms raw telemetry into intelligence — correlating behavior across nodes, surfacing anomalies, and generating executive-ready reports.

$32
/ node / month
  • Historical analytics & behavior baselines
  • Cross-node correlation & anomaly detection
  • Compliance mappings (SOC2/NIST/FedRAMP-ready)
  • Executive dashboards + audit reports
  • Analytics API access

Annual plans include extended retention, priority updates, and enterprise support eligibility.

Compare plans.

A simple path: visibility → protection → intelligence.

Talk to Sales
Feature Core Secure Insight
Fleet visibility
Real-time telemetry
Policy enforcement
Risk scoring
Incident timelines
Advanced analytics
Compliance reportingBasic
Executive dashboards
Analytics API access

Add-ons (Secure + Insight).

Extend NodeRunner into authentication, DLP, regulated modes, retention, and offline-first deployments.

Request Add-on Pricing
  • AI-Guarded Login — Adaptive authentication at the edge
  • Data Sentinel (DLP) — Endpoint-aware data loss prevention
  • FedRAMP Mode — Controls, logging, and isolation for regulated workloads
  • Extended Retention — 1, 3, or 7-year retention options
  • Air-Gapped Nodes — Offline-first execution with delayed sync
  • Organic Cloud Compute — Monetize idle node capacity (coming soon)

Add-ons are priced by node count, retention needs, and deployment mode.

  • Cloud-managed
  • Hybrid (cloud control plane + local collectors)
  • Fully isolated / air-gapped
  • MSP / multi-tenant deployments
  • Long-term audit archives
  • Exportable compliance packages
  • Executive dashboards and board-ready summaries

Why NodeRunner.

NodeRunner isn’t a dashboard on top of logs. It’s an edge-native operating layer that moves detection, decision, and control directly to every node — so you get real-time action, audit-grade evidence, and intelligence that scales with your fleet.

Distributed Control Loop
OBSERVE → SCORE → ENFORCE → RECORD → PROVE
👁️
Observe
Local telemetry with full context
⚖️
Score
Risk-scored signals, not noise
🛑
Enforce
Policy action at the edge
🧾
Record
Audit-grade evidence & timelines
📊
Prove
Analytics, reporting, compliance

Instead of shipping everything to a distant system and reacting later, NodeRunner makes decisions where the risk occurs.

Traditional Security

  • 📦 Centralized collection pipelines
  • 🚚 Ship everything to correlate later
  • ⏱️ Delayed time-to-action
  • 💸 Ingestion-based cost pressure
  • 🧩 Tool sprawl + brittle integrations

NodeRunner

  • ⚡ Local-first decisions on every node
  • 🧠 Context-aware risk scoring
  • 🛡️ Immediate enforcement & response
  • 🧾 Built-in audit trails & timelines
  • 📈 Predictable per-node cost at scale

🧠 Edge-first AI agents

Decisions happen where the data lives — not in a distant system.

⚖️ Risk-scored actions

NodeRunner prioritizes and automates response instead of flooding alerts.

🧾 Audit-grade evidence

Every action produces a timeline you can explain to leadership and auditors.

📈 Predictable scale

No ingestion tax. No surprise bills. Clean growth.

Enterprise

Built for large fleets, regulated environments, and high-assurance operations. NodeRunner can be deployed cloud-managed, hybrid, or fully sovereign — including on-prem and air-gapped.

Contact Enterprise Sales

Land the fleet. Control the edge. Prove everything.

NodeRunner is designed for enterprise realities: thousands to millions of nodes, strict compliance, and environments where telemetry must remain sovereign. We offer custom capability packs, private deployments, and integration support to fit your security and IT operating model.

Enterprise rollout Regulated mode Sovereign deployments Custom capabilities

🏛️ Data Sovereignty

Keep telemetry and analytics inside your boundary — regional, sovereign, or fully isolated.

🧱 On-Prem & Private Cloud

Deploy control plane and data services in your environment with your policies, keys, and access model.

🛰️ Air-Gapped & Offline-First

Operate without internet. Queue outputs, apply policy locally, and sync on your schedule.

🧩 Custom Integrations

SIEM/SOAR, CMDB, IAM, ticketing, and data exports — plus custom nanoservices and reporting.

Enterprise-ready delivery
Deployment design • Security review support • Phased rollout • SLA options • Dedicated onboarding