/ COSMOS ENTERPRISE

Production-grade.
Program-priced.

Everything in COSMOS Core, plus what programs of record actually need: multi-user accounts, RBAC, Kubernetes-scale, scheduling, automation, and direct engineering support — with no seat counts, node limits, or license keys.

/ WHAT ENTERPRISE ADDS

The six things Core can’t do
on its own.

Built for multi-user production environments — labs, mission operations centers, classified programs, and constellations.

Multi-user accounts & RBAC

Admin, Operator, and View-Only built-in. Custom roles down to the packet. LDAP, SSO, audit — powered by Keycloak.

Kubernetes & cloud scale

Fan workers across a cluster on AWS or GCP. Redis shards, S3/GCS buckets, Terraform, Helm. No single-server ceiling.

Scopes & multi-environment

Run many labs, missions, or test rigs on one COSMOS install. Per-scope users, per-scope roles, hard isolation.

Calendar & Autonomic

Schedule passes, contacts, and scripts. Define triggers and reactions. Close the loop when reality drifts off the rails.

Enterprise plugin library

Full CFDP. CCSDS TC/TM. Leaf Space and KSAT Lite ground-station integrations. More shipping every month.

Direct developer support

Skip the queue. 40 hours included. Talk to the engineers who shipped the code you're running — not a tier-1 deflector.

Horizontal scale
0
License keys
40
Hours of support included
Monthly
Security & feature releases
/ ACCOUNTS & RBAC

Shared logins were never a security model.

Every engineer gets their own account, their own permissions, and their own audit trail. Lock view-only users out of commanding. Scope an operator to a single subsystem. Build custom roles down to the individual packet.

  • Built-in Admin, Operator, and View-Only roles
  • Custom roles with any permission combination
  • Per-subsystem and per-scope access limits
  • LDAP and enterprise SSO via Keycloak
keycloak / role_matrix
enforced · audited
KEYCLOAK · identity
all scopes
ADMIN
Full system
Configure · deploy · command
scoped
OPERATOR
Assigned scope
Command · script · acknowledge
read-only
VIEW-ONLY
Assigned scope
Telemetry · screens · logs
definable
CUSTOM
Per-packet
Whatever the program needs
topology / cluster
Horizontal
cosmos enterprise · topology
  • GatewayCOSMOS Enterprise API
  • Workerssat-01 · sat-02 · sat-03 · … · sat-N
  • ShardsHorizontal fan-out
  • S3 / GCSPacket-log buckets
  • KeycloakSSO / RBAC
kubernetes · redis · s3 / gcs · keycloak
Kubernetes
SHARDS
S3 / GCS
AWS · GCP
Terraform · Helm
Istio mTLS
Constellations
No license keys
/ SCALE

Scale by adding workers,
not by adding licenses.

Enterprise runs the same COSMOS you know — fanned across a Kubernetes cluster shards underneath. Constellations of hundreds of targets on one install, with cloud-native buckets for packet logs that never roll off.

/ SCOPES

One install. Many environments.

Scopes carve a single COSMOS deployment into isolated environments — each with its own targets, users, and roles. Run multiple labs, programs, or simulation environments side by side without a second install.

  • Hard isolation of targets, users, and roles per scope
  • Stand up a new scope without redeploying COSMOS
  • Per-scope audit log and packet history
  • Mix prod, sim, and lab on the same install
install / cosmos-enterprise
3 scopes · isolated
COSMOS ENTERPRISE · install
isolated
lab-a
Subsystem I&T
users
12 users
roles
admin · op · view
targets
ADCS · PWR · COMMS
isolated
ops-prod
Mission Ops
users
34 users
roles
op · view
targets
SAT-01 … SAT-24
isolated
sim-nightly
Simulation
users
6 users
roles
admin · op
targets
SIM-BUS · SIM-PAYLOAD
calendar / 2026-06-18
Live
00:14 UTC
PASS · SAT-07 · KSAT Svalbard
00:42 UTC
SCRIPT · downlink_dump.py
01:08 UTC
PASS · SAT-12 · Leaf Awarua
01:30 UTC
NOTE · ADCS reaction-wheel soak
02:22 UTC
PASS · SAT-03 · KSAT Punta
autonomic · trigger
when tlm("BUS BATT_VOLT") < 27.4 for 30.s
  run_script "safe_mode_enter.py"
  page :ops_lead, "Battery soft-undervolt"
end
/ CALENDAR + AUTONOMIC

Schedule what should happen.
Automate what shouldn’t need you.

Calendar handles passes, contact windows, scripts, and notes — everything an ops team coordinates around a clock. Autonomic handles the reactions: triggers fire on telemetry, scripts respond, operators sleep through nominal nights.

  • Schedule commands, scripts, and contacts via UI or API
  • Notes and metadata pinned to time slots for the next shift
  • Custom triggers on any telemetry mnemonic or limit event
  • Reactions: run a script, send a command, page an engineer
/ ENTERPRISE PLUGIN LIBRARY

Still building redundant connections? Install plugins instead.

Common space-systems protocols and ground-network providers, packaged as Enterprise-only plugins — supported, versioned, and shipped with monthly releases.

PluginCategoryStatus
CFDP
File transfer
Shipping
CCSDS TC/TM
Framing
Shipping
Leaf Space
Ground network
Shipping
KSAT Lite
Ground network
Shipping
Ground-station SDK
Toolkit
GA
More plugins
Roadmap
Monthly

40 hours included

Every Enterprise subscription ships with 40 hours of direct engineering support per year so you never get stuck.

Same engineers who shipped it

There is no tier-1. You talk to the COSMOS core developers — the ones whose name is on the commit you’re asking about.

Monthly security & feature releases

Predictable cadence, signed builds, structured changelogs. Your program plans around it, not against it.

/ SUPPORT

Direct access to the people
who wrote the code.

/ SECURITY & DEPLOYMENT

Deployable wherever the program lives.

Cloud, on-prem, classified, air-gap. Commercially licensed so legal doesn’t have to negotiate copyleft terms. RBAC, audit, and SSO baked in from day one.

Public cloud
AWS · GCP · Azure
Commercial license
SSO + LDAP
Audit + RBAC
Same artifacts
On-prem
Bare metal · k8s
Commercial license
SSO + LDAP
Audit + RBAC
Same artifacts
Air-gapped
Disconnected lab
Commercial license
SSO + LDAP
Audit + RBAC
Same artifacts
Classified
IL-rated enclaves
Commercial license
SSO + LDAP
Audit + RBAC
Same artifacts
COSMOS operations console
/ LIFECYCLE REUSE

What you built in Core flies in Enterprise.

Packet definitions, limits, screens, scripts, and procedures move forward as-is when a program graduates from COSMOS Core in the lab to Enterprise in the mission ops center. No rewrite. No second tool to learn. The configs that proved the bird at I&T are the configs flying it on orbit.

  • 01 · Subsystem I&T
  • 02 · System I&T
  • 03 · Launch campaign
  • 04 · Mission ops
/ CORE VS ENTERPRISE

The full delta, in one table.

Core handles an entire I&T campaign. Enterprise adds the security, scale, and support programs need when many teams and missions converge on one platform.

COSMOS
Core(Open Source)
Command & Control
Command & telemetry processing
Script Runner (Ruby + Python)
Packet logging & replay
Security & Access
User accounts & RBAC
Multi-environment scopes
Scale & Automation
Kubernetes & horizontal scale
Calendar & Autonomic
Enterprise plugin library (CFDP, CCSDS, ground stations)
Support & Licensing
Direct developer support
Monthly security & feature releases
COSMOSEnterprise
Command & Control
Command & telemetry processing
Script Runner (Ruby + Python)
Packet logging & replay
Security & Access
User accounts & RBAC
Multi-environment scopes
Scale & Automation
Kubernetes & horizontal scale
Calendar & Autonomic
Enterprise plugin library (CFDP, CCSDS, ground stations)
Support & Licensing
Direct developer support40 hrs
Monthly security & feature releases
/ PRICING

Three ways to deploy COSMOS.

Headline pricing below — the full breakdown lives on the pricing page.

SINGLE PURPOSE
$33,000 / year*
Enterprise
  • Single space mission with up to five deployed satellites
  • Automated I&T framework for high-volume satellite or drone manufacture
  • Ground facilities such as an antenna site, RF range, or launch facility
PRODUCT LINE
$100,000 / year*
Enterprise
  • Building and operating a 1,000-unit spacecraft constellation
  • Fleet-level operations for a single drone type
Most Flexible
MULTI-PRODUCT
$165,000 / year*
Enterprise
  • Operating unlimited satellites or drones from any vendor as part of a mission operations center

*Prepaid and perpetual subscriptions available — contact us for details.

There’s no such thing with COSMOS Enterprise. Engineers can just deploy and use COSMOS for everything on their program without having to buy more seats, or nodes, or networks. It’s an entire genre of friction and failure that simply doesn’t exist with us.
Greg Bonn, COO · OpenC3
/ FAQ

Questions program leads actually ask.

Which Enterprise scope should we pick?+
Single Purpose ($33K/yr) is the default for a single named project with up to 5 operational units, or broader non-operational I&T and factory ops. PRODUCT LINE ($100K/yr) is recommended for unlimited operational units from a single product line. MULTI-PRODUCT ($165K/yr) supports unlimited operational units from any vendor as part of a single named project.
Are there seat counts, node limits, or license keys?+
No. Enterprise is licensed per program scope, not per seat or node. Deploy across your whole lab, mission ops center, and constellation without calling sales every time you add a workstation.
Where can we deploy it?+
Anywhere COSMOS runs: AWS, GCP, on-prem Kubernetes, classified networks, and air-gapped labs. We ship Terraform and Helm to make stand-up reproducible. See Services for assisted deployment.
How does support actually work?+
Every Enterprise subscription includes direct support with the COSMOS developers — not a routing tier. Email support directly and get a response from the engineers who wrote the code. Programs that need more can buy additional support hours.
Can we upgrade from Core without rewriting anything?+
Yes — that’s the point. Packet definitions, screens, scripts, limits, and procedures move forward as-is. You add multi-user accounts, scopes, Calendar, and Autonomic; you don’t rebuild your existing config.
What about FedRAMP, ITAR, classified environments?+
Enterprise is commercially licensed and runs on infrastructure your program already controls — including IL-rated clouds and air-gapped enclaves. Posture-specific deployments are scoped via Services.
/ NEXT STEP

See Enterprise running on your stack.

A 30-minute walkthrough with an engineer, mapped to your program’s deployment, scale, and security posture.