# Enterprise

> Octelium documentation. Canonical page: <https://octelium.com/docs/octelium/latest/overview/enterprise>.

## Overview

Octelium Enterprise is meant to help teams and teams and enterprises seamlessly manage and operate Octelium *Clusters* at scale. Octelium Enterprise can be used for free for personal, non-commercial and non-professional use (e.g. homelabs) and internal, non-production evaluation by organizations. Production and commercial use require a commercial license from Octelium Labs. You can contact us [here](https://octelium.com/contact).

## Main Features

Octelium Enterprise includes various featues, most notably:

- **Web-based management console** The web console helps teams manage and monitor Octelium *Clusters* in a centralized and scalable way and have clear visibility in real-time. It includes various features among which: an AI assistant, browser terminals for connecting to *Services* over remote sandboxes, visual *Policy* builders and testers, and LLM and MCP playgrounds.

  **Overview:** A tour of the console overview pages showing access activity, logins, connected Sessions and pending access requests.

  **AI Assistant:** Asking the AI agent to investigate a User's denied requests and identify the Policy responsible. Inspect activity and manage resources through natural-language requests, with your approval before changes.

  **Resources:** Filtering the Services list and inspecting the configuration and access logs of a PostgreSQL Service.

  **Connecting to Services:** Connecting to a PostgreSQL Service from a browser terminal and querying the database.

  **LLM/MCP Playground:** Sending a prompt through an LLM Service from the console playground and receiving the streamed response.

  **Policy Tester:** Testing access to a Service and inspecting the deciding Policy before deploying changes.

- **Just-in-time access** *Users* request temporary access to *Services* or *Catalogs* from a web-based access portal. Access *Policies* automatically approve, deny or require multi-step reviews of requests, and approved access expires automatically. Slack, Jira and webhook integrations let your team receive and review requests from their existing tools.

  **The Access Portal:** Requesting temporary access to a Catalog from the access portal and approving a review step.

- **Centralized logs, metrics and SSH recordings** Real-time, centralized visibility in the web console for all logs (e.g. activity and access logs, logins and authentication logs, resource changes and audit logs, as well as component logs) and metrics, full SSH session replays, and dashboards for component health and LLM usage by model, *User* or *Service*.

  **Access Logs:** Filtering access logs and inspecting allowed and denied requests with their identities and matched Policies.

  **SSH Session Recording:** Replaying a recorded SSH session on the bastion Service.

  **Metrics:** The metrics overview with request rates, active requests, authorization latency and component CPU usage.

  **LLM Usage:** The LLM usage of the Cluster with requests, tokens, latencies, tool calls and quota decisions.

- **SIEM integration** Export all the *Cluster* logs and metrics in real-time to your existing SIEM providers (e.g. Splunk, Datadog, Elasticsearch and Grafana Cloud) with pipelines exporting to multiple providers concurrently.

- **SCIM provisioning and directory synchronization** Automatically provision and synchronize *Users* and *Groups* via SCIM 2.0 (e.g. Microsoft Entra ID and Okta), as well as via Google Workspace and Keycloak with support for multiple, concurrent directory providers.

- **Secret encryption at rest** Encrypt all the *Cluster*'s *Secrets* at rest using external key management systems, with support for HashiCorp Vault, AWS KMS, Google Cloud KMS and Azure Key Vault (read more [here](https://octelium.com/docs/octelium/latest/management/core/secret.md#secret-storage)).

- **Automatic TLS certificates and public DNS** Automatically issue and renew TLS certificates via ACME (e.g. Let's Encrypt) with your public DNS providers via DNS-01 challenges, and manage public DNS records for *Services* through providers such as Cloudflare and AWS Route 53.

- **Managed upgrades and scaling** Upgrade the *Cluster* from the web console and track upgrade rollouts. Multi-region *Clusters* spanning multiple Kubernetes clusters across regions and clouds are also available.

  **Upgrades:** Installed package versions, available updates and the history of upgrade rollouts.

- **Premium support and commercial licensing** Get support via a dedicated private Slack channel, help with production deployments and compliance, and input into the roadmap. The enterprise offering also includes a commercial alternative license for the open source *Cluster* components.

## Installation

You can read about installing and upgrading the enterprise package [here](https://octelium.com/docs/octelium/latest/install/cluster/enterprise.md). For Cluster installed via the quick installation guide (see [here](https://octelium.com/docs/octelium/latest/overview/quick-install.md)), you only need to add the `--enterprise` flag to the installation script.