What is Self-Hosted / On-Premises?

Self-hosting keeps code inside your perimeter. For defence, finance, healthcare and anyone with a hard data-residency rule, it is frequently the only deployment that passes review, which makes it a hard filter rather than a preference.

The cost is ownership: you run the upgrades, the database, the scaling and the incident response. Check carefully whether a vendor's self-hosted edition is a first-class product or a legacy option kept alive for existing customers, because those age very differently.

Top 16 Self-Hosted / On-Premises tools

Every tool in the directory documented as supporting Self-Hosted / On-Premises, 10 fully, 6 partially, with what its own documentation says.

Support is not the same as parity, since some implementations are narrower in scope, gated to a higher plan tier, or maintained only for existing customers. The note under each tool is what its own documentation describes.

1. 1
   AikidoCode Security PlatformPro

   On-prem code/container scanning from Pro; Zen Firewall on-prem and endpoint agent need Advanced

2. 2
   ChatGPT / CodexAgent Coding Tool

   Codex CLI --oss mode runs against buyer's own Ollama/LM Studio or any OpenAI-compatible endpoint.

3. 3
   CodeAnt AIPR ReviewEnterprise

   Enterprise Plan only: full on-prem/VPC deployment (AWS/GCP/Azure or private data center)

4. 4
   CodeRabbitPR ReviewEnterprise

   Container image runs in customer infra; Enterprise only, 500-seat minimum.

5. 5
   CodeSceneQuality PlatformStandard

   On-prem (Self managed) deployment listed on all three paid tiers: Standard, Pro, Enterprise

6. 6
   DeepSourceQuality PlatformEnterprise

   Full Enterprise Server platform installs into customer VPC or datacenter via standalone or existing Kubernetes.

7. 7
   GitHub Advanced SecurityCode Security PlatformAdd-on on GitHub Enterprise Server

   GitHub Enterprise Server is customer-installed; Code Security and Secret Protection sold as standalone SKUs since 3.17.

8. 8
   GreptilePR ReviewEnterprise

   docker-compose on customer compute; buyer provisions Postgres with pgvector and Redis.

9. 9
   QodoPR ReviewEnterprise

   Documented Kubernetes install, images via Replicated registries.

10. 10
    SonarQubeQuality Platform

    SonarQube Server self-managed; free Community Build; Data Center edition for large enterprises.

11. 11
    Checkmarx OneCode Security PlatformPartialEnterprise

    On-prem CxSAST installs in customer infrastructure, SAST only; the Checkmarx One platform stays vendor-hosted.

12. 12
    Claude CodeAgent Coding ToolPartialTeam

    Buyer runs runners executing cloud sessions in own network; control plane and inference stay with Anthropic.

13. 13
    QltyQuality PlatformPartialFree (CLI)

    Only the Fair Source CLI runs locally; Qlty Cloud platform and dashboard are SaaS-only.

14. 14
    SemgrepCode Security PlatformPartialEnterprise

    OSS engine runs in customer CI; platform stays SaaS. Enterprise adds Semgrep-managed tenant, not customer install.

15. 15
    SnykCode Security PlatformPartialEnterprise

    Broker Client and Container Registry Agent deploy in customer infra; Broker Server and scanning stay Snyk-hosted.

16. 16
    VeracodeCode Security PlatformPartialadd-on

    SCA and CI agents run in customer network; analysis platform and results remain Veracode SaaS.

What to look for

• Whether the self-hosted edition reaches feature parity with the cloud one
• Whether it is actively developed or maintained for legacy customers only
• Infrastructure requirements and realistic operational burden
• How vulnerability and rule updates reach an installation you control

Related terms

FAQ