Deployment

What is air-gapped (offline) deployment?

Running the tool fully offline, with no internet connection at all, in an environment physically isolated from outside networks.

By Cláudia FernandesUpdated 2026-10-02

Air-gapped is stricter than self-hosted. The installation cannot phone home for license checks, telemetry, rule updates or vulnerability feeds, so everything must be transferable through an offline update bundle.

This is classified and critical-infrastructure territory. Ask specifically how the vulnerability database is refreshed offline, because a scanner with a stale advisory feed reports confidently on last quarter's threat landscape.

What to look for

How vulnerability data and rules are updated without network access
Whether licensing works fully offline
Which features silently degrade, since AI review usually cannot work at all
Documented installation procedure rather than a bespoke engagement

Best 9 code quality, security and code review tools that can run air-gapped

Every tool in the directory whose documentation covers this, 8 fully and 1 partially. Full support is shown first. Shown in a random order that changes on every visit, so no tool gets an advantage from its position.

Support is not the same as parity, since some implementations are narrower in scope, gated to a higher plan tier, or maintained only for existing customers. The note under each tool is what its own documentation describes.

Code Security Platform

Aikido

Aikido Machine runs with no internet, updated by encrypted USB or one allowlisted domain; Cloud Scanning is not offered.

PR Review Tool

CodeAnt AI

Enterprise Plan deploys fully on-premises, including air-gapped environments with zero external network connectivity.

Code Quality Platform

CodeScene

CodeScene On-prem offline mode runs without an external network connection and comes with the self-managed deployment on any paid plan.

Code Quality Platform

DeepSource

Documented air-gap install for servers with no internet; bundle staged locally, license key required.

Code Security Platform

GitHub Advanced Security

Code and secret scanning run offline via CodeQL bundle sync; Dependabot SCA needs GitHub Connect.

PR Review Tool

Greptile

Greptile says its entire self-hosted service can run in an air-gapped environment, and self-hosters can run their own LLMs instead of a cloud model API.

PR Review Tool