Spiky

Control layerLive

A license is a signed verdict, not a row in a database.

A license control plane for software on machines you do not own: activation, signed validation, plugin entitlements, fleet visibility, and remote kill switches.

Open Spiky All systems

System mapControl

Client

LICENSESPKY-••••-••••-••••-••••fingerprint + server id

SIGNEDallowRuntime

Ed25519 payloadnonce replay guardplugin entitlements

Control plane

Fleet

Kill switches

Audit

Layer

Control plane

Signing

Ed25519 entitlement payloads

Storage

PostgreSQL · MongoDB · Redis

App

Next.js 15 · React 19

Built for the layer it owns.

Spiky started as the licensing layer for Leviathan Premium. It is now a standalone control plane: issue a license, bind it to a machine, validate on a short schedule, and keep the operator in the path of every runtime decision.

The live panel runs at license.vertalt.my.id with PostgreSQL, MongoDB, and Redis behind it. The private key never leaves the server; clients pin the public key; kill switches are audited and effective on the next check-in.

/01

Machine-bound activation

Licenses bind to a fingerprint and an optional server id. Activation slots are enforced, machines can be revoked, and raw keys are stored only as HMAC hashes.

/02

Signed validation

Every verdict is an Ed25519-signed payload. A fresh nonce is required per validation; replay fails closed at the Redis nonce store.

/03

Plugin entitlements

Enable or disable plugins globally or per license. The signed payload carries the resulting entitlement set to the client.

/04

Fleet visibility

Heartbeats record hostname, IP, region, version, installed plugins, and last-seen time — including servers that are running without a valid license.

/05

Remote kill switches

Suspend a license, kill a product, block a server, or disable a plugin. The next validation or heartbeat enforces it, and every action is audited.

/06

Operator experience

A calm, dense panel for issuing licenses, watching the fleet, reviewing audit events, and shipping an SDK that verifies responses locally.

When this is the right layer.

Software vendors shipping to customer infrastructure

Networks that need to revoke a machine or plugin remotely

Products that want an offline-verifiable entitlement instead of a bare key check

Specification

Layer: Control plane
Signing: Ed25519 entitlement payloads
Storage: PostgreSQL · MongoDB · Redis
App: Next.js 15 · React 19
Panel: EN / ID
Public endpoint: license.vertalt.my.id

The live control plane is open. The source and operator credentials stay private.

Open Spiky