diff --git a/backend/src/ee/services/license/license-fns.ts b/backend/src/ee/services/license/license-fns.ts
index 5da5d0c6c..2a3cf82cc 100644
--- a/backend/src/ee/services/license/license-fns.ts
+++ b/backend/src/ee/services/license/license-fns.ts
@@ -23,29 +23,29 @@ export const getDefaultOnPremFeatures = (): TFeatureSet => ({
   identitiesUsed: 0,
   dynamicSecret: false,
   secretVersioning: true,
-  pitRecovery: true,
+  pitRecovery: false,
   ipAllowlisting: false,
-  rbac: true,
+  rbac: false,
   githubOrgSync: false,
   customRateLimits: false,
   customAlerts: false,
   secretAccessInsights: false,
-  auditLogs: true,
-  auditLogsRetentionDays: 30,
+  auditLogs: false,
+  auditLogsRetentionDays: 0,
   auditLogStreams: false,
   auditLogStreamLimit: 3,
-  samlSSO: true,
+  samlSSO: false,
   enforceGoogleSSO: false,
   hsm: false,
-  oidcSSO: true,
-  scim: true,
-  ldap: true,
-  groups: true,
+  oidcSSO: false,
+  scim: false,
+  ldap: false,
+  groups: false,
   status: null,
   trial_end: null,
   has_used_trial: true,
-  secretApproval: true,
-  secretRotation: true,
+  secretApproval: false,
+  secretRotation: false,
   caCrl: false,
   instanceUserManagement: false,
   externalKms: false,
@@ -57,17 +57,17 @@ export const getDefaultOnPremFeatures = (): TFeatureSet => ({
   pkiEst: false,
   enforceMfa: false,
   projectTemplates: false,
-  kmip: true,
-  gateway: true,
-  sshHostGroups: true,
-  secretScanning: true,
+  kmip: false,
+  gateway: false,
+  sshHostGroups: false,
+  secretScanning: false,
   enterpriseSecretSyncs: false,
   enterpriseCertificateSyncs: false,
   enterpriseAppConnections: false,
   fips: false,
-  eventSubscriptions: true,
-  machineIdentityAuthTemplates: true,
-  pam: true
+  eventSubscriptions: false,
+  machineIdentityAuthTemplates: false,
+  pam: false
 });
 
 export const setupLicenseRequestWithStore = (