Both editions ship the same container image and Python package. Pro capabilities activate when you install a license file, so upgrading never means migrating.
Choose whichever install path matches your stack.
Same download, unlocked by a signed license file.
Pick one path. Every path applies database migrations and seeds the 61-control catalog on first boot.
# clone or unpack the release, then cp .env.example .env docker compose up -d --build # open the dashboard and create the first admin open http://localhost:8080
# deploy the app service from the repo railway up # add the Postgres plugin, then set DATABASE_URL, SOC2_ENCRYPTION_KEY
Full walkthrough in the deployment docs.
Purchases are delivered as a signed license file. Verification is local; nothing calls home.
Sign in as an administrator, open License, paste the license JSON, and install. Pro collectors, auditor links, policy approvals, and remediation become available immediately.
Fissionworx# mount the license into the container
-v ./license.json:/etc/fission/license.json
-e FISSION_LICENSE_FILE=/etc/fission/license.json
fission-accountant license
Read-only credentials only. The product never needs write access to your cloud.
| Source | Credential | Permissions |
|---|---|---|
| GitHub | Fine-grained organization token | Read organization administration, repository metadata, and security settings |
| AWS | Read-only role or short-lived keys | IAM, S3, RDS, CloudTrail, Config, GuardDuty, KMS, EC2, and CloudWatch Logs read access |
| Google Cloud (Pro) | Service account JSON | cloud-platform.read-only on the project |
| Google Workspace (Pro) | Service account with domain-wide delegation | admin.directory.user.readonly |