Deployment
Run 10ETLabs in your own cloud
Same product as our SaaS, installed in your account. Your cloud metadata never leaves your environment. That keeps a security review to a software vendor review, not a data processor review.
Your metadata stays in your account
Inventory, findings, attack paths and encrypted connection secrets live in your Postgres. You hold the encryption key. 10ETLabs has no login, tunnel or copy.
Helm or a single VM
A Helm chart for Kubernetes 1.25+ (EKS, AKS, GKE) with your managed Postgres and Redis, or one Docker host with an install script for smaller estates and pilots.
Offline license, no phone-home
The license is a signed file checked locally. There is no activation server, usage beacon or telemetry. Air-gapped installs load images from a release bundle.
SaaS or self-hosted
| SaaS | Self-hosted | |
|---|---|---|
| Who operates it | 10ETLabs runs, patches and monitors the platform | Your team runs it on your infrastructure; we ship releases and support |
| Where data lives | 10ETLabs-hosted database in our cloud region | Your database, in your account and region |
| Credential encryption key | Held in 10ETLabs’ secret store | Held by you only |
| Updates | Continuous, no action needed | You choose when: helm upgrade or upgrade.sh, with backup first |
| Support | Included; we can see platform health | Included; you share logs via a redacted support bundle when you choose |
| Features | Full product | Same images and features |
| Vendor review scope | Subprocessor, DPA and hosting review | Software vendor review; we never process your cloud metadata |
What you run
- Kubernetes: Helm chart with API, scan worker and console. Ingress with TLS, NetworkPolicies, PodDisruptionBudgets and IRSA or Workload Identity annotations.
- Single VM: Docker Compose with Postgres, Redis and automatic HTTPS. Install, upgrade, backup and restore scripts.
- Air-gapped: a release bundle of images and charts you carry across the gap and load into your registry.
- Sizing: about 4 vCPU and 8 GB RAM for ~10 cloud accounts on one VM. Kubernetes with managed databases for ~100.
Worth knowing
- Ask 10ET uses an external model only when you add your own OpenAI API key. It is off by default, and then no data leaves your network for AI.
- You operate Postgres 16 and Redis 7 (managed services recommended). Backups and upgrades are your team’s runbook, and we provide the scripts.
- Egress goes only to the cloud and integration APIs you connect (AWS, Azure, GCP, Kubernetes, VPS providers, your SMTP, Jira or SIEM).
- The license sets how many cloud accounts you can connect. When it lapses there is a 14-day grace period. After that, viewing keeps working and new connections and scans pause.
Self-hosted is sold like the SaaS: quoted on connected accounts. See Pricing or contact sales for a license and the install guide.