$ git diff main -- deployment/self-hosted.md
commit a1b2c3d - author: Oliver Wakefield-Smith - verified 21 Jun 2026
12 of the 19 tracked tools support self-hosted deployment. Of those, only Qodo, Augment Code, Snyk Code, SonarQube Server and Diffblue Cover run truly air-gapped. Most "self-hosted" offerings still require an outbound connection for model inference. Verify before assuming it satisfies your security team.
@@ 12 tools with a self-hosted option @@quote-gated where noted
1+CodeRabbit - Enterprise: contact sales (self-hosted, SSO, audit logs)src
2+Qodo - Enterprise: contact sales (on-prem, BYOK, SSO)src
3+Greptile - Enterprise: contact sales (SSO, self-host, custom rules)src
4+Codacy - Business / Self-hosted: contact salessrc
5+Bito - Enterprise: contact sales (BYOK, self-host, SSO)src
6+DeepSource - Enterprise / Self-hosted: contact salessrc
7+SonarQube - SonarQube Server Developer / Enterprise / Data Center editions licensed per LOCsrc
8+Snyk Code - Enterprise: contact sales (SSO, on-prem broker, governance)src
9+Qlty - Enterprise: contact sales (SSO, self-host, audit)src
10+Augment Code Review - Enterprise: contact sales (VPC, on-prem, SSO)src
11+Launchable - Enterprise: contact salessrc
12+Diffblue Cover - Cover Enterprise: contact salessrc
@@ infra footprint at 50 devs @@typical
1CodeRabbit self-host: k8s cluster, Postgres, Redis. Outbound to chosen LLM provider unless air-gapped variant negotiated.
2Qodo self-host: Docker or k8s, BYOK to your chosen LLM. Air-gapped requires self-hosted inference (vLLM, TGI).
3SonarQube Server: JVM + Postgres + Elasticsearch. Self-contained for rule-based; AI Code Assurance calls out for inference.
4DeepSource Enterprise: k8s + Postgres. Quote-only pricing.
@@ the 'self-hosted with outbound' gotcha @@security caveat
1-Several vendors advertise self-hosted but still call the model vendor's API from your VPC. If your security team needs "no data leaves the perimeter", that does not qualify.
2+For true air-gap, see /deployment/air-gapped.
@@ cross-links @@related
1/deployment/byok - bring your own key on self-host
2/deployment/air-gapped - true no-outbound deployments
3/scorecard - full ranking