Disclosed herein are methods, devices, systems and computer-executable instructions for managing software in threat-monitoring systems. One such method comprises receiving a plurality of licence identifiers identifying respective licences available for assignment to a threat monitoring system. The method further comprises receiving a selection of at least one of the licence identifiers. The method also comprises uploading, to the threat monitoring system, an activation tool for activating at least one operational function of the threat monitoring system, the at least one operational function corresponding to the selected at least one licence identifier.