Deployment
What is Air-Gapped?
Running with no outbound network access at all, in an environment physically isolated from the internet.
Air-gapped is stricter than self-hosted. The installation cannot phone home for licence checks, telemetry, rule updates or vulnerability feeds, so everything must be transferable through an offline update bundle.
This is classified and critical-infrastructure territory. Ask specifically how the vulnerability database is refreshed offline, because a scanner with a stale advisory feed reports confidently on last quarter's threat landscape.
Top 8 Air-Gapped tools
Every tool in the directory documented as supporting Air-Gapped, 7 fully, 1 partially, with what its own documentation says.
Support is not the same as parity, since some implementations are narrower in scope, gated to a higher plan tier, or maintained only for existing customers. The note under each tool is what its own documentation describes.
- 1
Broker for Internal Apps enables air-gapped/internal deployments; included from Advanced
- 2
On-prem comparison table: 'Offline mode for very strict security requirements', offline access supported
- 3
Documented air-gap install for servers with no internet; bundle staged locally, licence key required.
- 4
Code and secret scanning run offline via CodeQL bundle sync; Dependabot SCA needs GitHub Connect.
- 5
Docs state the entire service can run air-gapped; any OpenAI-compatible endpoint allows a local model.
- 6
Air-gapped is a first-class column in the deployment matrix; local LLM gateway supported via api_base.
- 7SonarQubeQuality Platform
Offline license activation is a documented method; AI CodeFix self-hosted configs are designed for zero outbound internet
- 8
Free CE engine runs offline with local rule files; AppSec Platform cannot be air-gapped.
What to look for
- How vulnerability data and rules are updated without network access
- Whether licensing works fully offline
- Which features silently degrade, since AI review usually cannot work at all
- Documented installation procedure rather than a bespoke engagement
Related terms
FAQ
What is Air-Gapped?
Running with no outbound network access at all, in an environment physically isolated from the internet.
How many tools support Air-Gapped?
8 of the 20 tools tracked in this directory support Air-Gapped, 7 fully and 1 partially, including Aikido, CodeScene, DeepSource, GitHub Advanced Security, Greptile. Support is not the same as parity, since some implementations are narrower in scope, gated to a higher plan tier, or maintained only for existing customers. The note under each tool is what its own documentation describes.
What should you look for in Air-Gapped?
How vulnerability data and rules are updated without network access. Whether licensing works fully offline. Which features silently degrade, since AI review usually cannot work at all. Documented installation procedure rather than a bespoke engagement.