Tessera Guard
PX-04
Licensing
Fifty-nine dollars a year, not a SOC contract.
Priced against the tools it actually replaces — a firewall monitor and a traffic watcher — rather than against the managed service it is not trying to be.
Little Snitch is about €59 once for a single Mac. GlassWire runs $39 to $99 a year per device. A managed network monitor starts in the thousands and comes with an agent reporting to somebody else's cloud. Tessera Guard is priced against the first two, because that is what it replaces.
Free
No account
$0
forever
The whole monitoring surface for one machine, so you can look at your own network before paying anybody.
Device discovery and network map
Live traffic, connections and processes
Alerts and system health
One machine
Pro
Most people
$59
per year
or $6 a month
Everything that acts on what it finds — the detection engines, the packet inspector, the scanners and the AI control surface.
Everything in Free
10 behavioural detection engines, MITRE-mapped
Packet inspector and .pcap export
Vulnerability scanner and IOC scan
WireGuard client with stealth mode
29 MCP tools for local AI clients
3 machines
Lifetime
Own it
$149
once
The same licence, bought outright. Useful if you dislike renewals as much as we do.
Everything in Pro
Every 1.x update included
3 machines
Nothing to renew
Team
5 seats up
$99
per seat / year
minimum 5 seats
For a business with no IT department: one invoice, shared policy, and somebody to email when it matters.
Everything in Pro
Shared trusted-device and blocked-IP lists
Pooled seats, reassignable
Priority support, one business day
Invoice billing
Prices in USD, excluding local tax. A licence unlocks features on your machine; it does not ask a server for permission to work. Check in when you can, and it keeps running offline for 30 days.
Talk about a licence ↗
Questions we actually get.
Does it replace my antivirus?
No, and the app says so too. The indicators-of-compromise scan looks at persistence, code signing, suspicious paths, browser extensions and quarantine attributes — the things an AV is weakest at. Run both.
What happens when the licence cannot check in?
It keeps working. A licence unlocks features on your machine rather than asking a server for permission, and there is a thirty-day offline grace before anything locks.
Is any of my network data uploaded?
None. There is no account, no telemetry and no cloud analysis. Everything is computed locally and stored in one SQLite file you can delete.
Do I need to be a security engineer to use it?
No. That is most of the point of the detail panel: every finding is described in plain English, shows the numbers behind it, and lists remediation steps tagged safe, caution or destructive so you know which ones are reversible.
Can I run it on both my Mac and my Windows machine?
Yes. Pro and Lifetime cover three machines on either platform. The indicators-of-compromise checks are macOS-specific; everything else runs on both.