Enterprise Edition

Operate and prove. The Enterprise Edition adds the operations and forensics layer on top of the complete, free Community core — for teams that have to demonstrate what their security layer did: to an auditor, a regulator or a SOC. Commercial licence; terms on request.

Builds on Community Identical wire formats Independently verifiable Commercial licence

Monitoring and health

jCustos-monitoring — a never-throw metrics SPI with the concept-verbatim security.* name catalogue, an event-bus bridge that counts the rejection family, and health indicators that give /health one body shape framework-wide.

Tamper-evident audit chain

jCustos-audit-integrity — an append-only, hash-linked audit chain with a verifier, signed batches and a re-verifiable NDJSON export. Reconstruct and verify the trail from the text and the public keys alone — across process restarts.

SIEM and OpenTelemetry export

Forward signed security envelopes to your stack: SIEM formatters (CEF, LEEF 2.0, NDJSON), an OpenTelemetry logs-bridge exporter, a webhook publisher (HTTPS, retry with backoff) and the REST/SSE bridge — plus durable event and replay persistence.

What it adds, module by module

Module	What it gives you
`jCustos-monitoring`	Metrics SPI, `security.*` name catalogue, event-bus bridge, health indicators
`jCustos-audit-integrity`	Tamper-evident audit hash chain, verifier, signed batches, re-verifiable NDJSON export
`jCustos-audit-integrity-testkit` · `-persistence-eclipsestore`	Contract testkit and restart-safe, durable chain storage
`jCustos-events-webhook`	Signed envelopes over HTTPS, bounded queue, retry with backoff
`jCustos-events-siem`	CEF, LEEF 2.0 and NDJSON formatters (transport stays with the host)
`jCustos-events-opentelemetry`	OpenTelemetry logs-bridge export, payload-free attribute vocabulary
`jCustos-events-rest` · `-events-persistence-eclipsestore`	REST/SSE bridge for signed envelopes and durable event / replay storage

It builds on Community, it does not replace it. The Enterprise modules attach through the same SPIs the free core already exposes, and share its wire formats, EventType values, metric names and audit-chain hashes. There is nothing to migrate — add the dependency and the capability appears; drop it and only the capability goes.

Getting access

Enterprise artifacts are published to repo.jsentinel.eu/sensitive; the read credentials come with your licence. Access is gated by a signed, offline-verifiable licence file checked at bootstrap.

<dependency>
  <groupId>eu.jsentinel.jcustos.enterprise</groupId>
  <artifactId>jCustos-audit-integrity</artifactId>
  <version>00.83.00</version>
</dependency>

Enterprise access, pricing and commercial terms: sven@jsentinel.eu.

← Back to the Community Edition