License Radar

Investigate suspicious license activity in Keymint, including device cycling, activation storms, cross-license sharing, and Radar incident responses.

License Radar runs scheduled scans for every workspace and surfaces suspicious activation patterns as incidents. It is designed for investigation and response, not as a replacement for normal license telemetry.

Detection types

• Device cycling: one key repeatedly moves across devices.
• Activation storms: unusually rapid activation activity.
• Cross-license sharing: the same device pattern appears across unrelated keys.

Incident workflow

Open Radar and review incidents in Active, Resolved, or False positive. Use the detection-type filter to narrow the list. Resolve an incident after taking action, or mark it as a false positive when the activity is expected. Scheduled scan status is shown at the top of the page.

Alert destinations

The Alert destinations tab connects Slack or Discord incoming webhooks for critical Radar alerts. Send a test notification after configuring a destination, and disconnect or replace it when the channel changes.

Radar signals are advisory. Confirm the underlying license activity and customer context before blocking a key.