Maran Source-available, and free to run yourself
You may install Maran and host your own customers on it. What the licence restricts is selling Maran itself as a service.
The licence
Maran is published under the Business Source License 1.1, with Innovayse LLC as licensor. On 29 August 2030 the licence changes to Apache 2.0.
Until then, the additional use grant allows production use — including running it to host your own hosting customers. What it does not allow is offering Maran itself as a hosted or managed control panel service to third parties, or selling, reselling, relicensing or redistributing it as your own commercial product.
What costs money
The panel and the modules that make it a hosting panel are free to self-host. Commercial modules are distributed through the Innovayse marketplace and require a licence key.
Licensing is verified offline against a signed licence, refreshed by a short daily exchange. When that service cannot be reached, the server keeps running on its last lease; after the grace period only commercial modules stop working. The core never stops, and a server never becomes unmanageable because a licence server was down.
Prices
Not published yet. Maran has not reached its first feature release, and which modules are commercial has not been decided. This page will carry the details when there are details to carry rather than a number somebody has to correct later.
Reporting a security issue
Write to security@innovayse.com rather than opening a public issue. Reports are acknowledged within 48 hours, and critical issues carry a target of a fix or a documented mitigation within 14 days.