Older versions of Maltego (v3.x) had offline activation, leading to keygens. Modern Maltego (v4.x) uses . Each request to run a transform includes a JWT token signed by Paterva’s server. A fake key would fail immediately because the transform servers reject unsigned tokens.