OpenSearch Octane, only from Lucenia
Four modules that drop into the cluster you already run. Your mappings do not change, your queries do not change, and nothing phones home.
curl -fsSL https://getoctane.lucenia.io | shThe Advisor
A free, read-only tool that reads your cluster over its REST API and writes one self-contained page. No licence, no trial, no expiry. It works the same whether or not you ever buy anything.
Before anything about shards or heap, the report opens with the vulnerabilities the version on each of your nodes is actually subject to — matched against the affected-version ranges in the advisory itself, not guessed from a version number.
A clean result is never silent. Every run states how many advisories it compared, where they came from and the day they were generated — because an empty security section and an unrun check look identical, and only one of them is good news. If the data is older than an OpenSearch release cycle, the report says so instead of calling it an all-clear.
Needs a JDK and nothing else. Verifies its own download, runs, and writes a page you can mail to whoever owns the budget.
Every request to your cluster is a GET, and no data about it ever leaves your machine. Nothing is ever sent to Lucenia — running it tells us nothing, not even that you ran it.
Every finding carries the figures it was computed from, so you can check it against _cat/shards in thirty seconds.
Each one comes with the exact command, built from your own cluster’s values — real index names, ready to paste.
The modules
Each is independent. The licence plugin is shared, and nothing phones home.
Accelerator
Benchmarked against stock OpenSearch on the same hardware and the same data. Your mappings do not change, your queries do not change, and your application does not know it is there.
From $6,103/year
geo_shape and range queries against stock OpenSearch — reproducing on every clean runGovernance & Compliance
The compliance engine finds sensitive values and redacts them before writing, so the cluster never holds what you are not allowed to keep. Eleven regulatory profiles, four redaction modes, and detectors you can define at runtime without a redeploy.
From $4,359/year
A compliance control is bought against an auditor’s deadline, not a benchmark — so this one is priced above content and below the accelerator.
Content Extraction
Extraction, chunking and embedding in the ingest pipeline, plus the geospatial stack: imagery tiling, reprojection, and raster sources read by range request rather than downloaded whole.
From $3,836/year
Fetches are governed: deny-by-default control over which sources a cluster may read, so ingest cannot be turned into an exfiltration path.
Autoscale
A controller you run beside the cluster, not a plugin you install into it. No per-node install, no restart, and it works against a managed OpenSearch domain where you could not install a plugin at all.
From $3,139/year
A licence gates starting work, never finishing or undoing it: a drain writes an allocation exclusion that something has to remove.
Air-gapped by default
No licence server, no metering call, no telemetry. A licence is a signed file your cluster verifies against a public key it already has, offline, at install and at every gate. If it lapses, capability degrades — your data stays readable, because a billing problem must never become an outage.
Pricing
Move the slider to your cluster’s data node count. Every figure below is the amount charged — there is no rounding between this page and your invoice.
All four modules for 25 data nodes, billed annually.