Deployment models
Cloud-hosted, self-hosted, and self-hosted air-gapped: what each needs and when to pick it.
SBOM Observer is available cloud-hosted or self-hosted, including in air-gapped networks.
Cloud-hosted
Bitfront runs SBOM Observer for you, including updates and backups. Get started at SBOM Observer, or try the live demo, no signup required.
Self-hosted
SBOM Observer runs on Docker in your own infrastructure, so SBOM data stays there. It still needs internet access to pull container images and vulnerability data. You run the backups and upgrades. It is the same product as the cloud-hosted service, with the same policies and CLI. Contact us to get started.
Self-hosted, air-gapped
This is self-hosted in a network with no internet access. SBOM Observer can't download updates or vulnerability data there, so you download the data on a connected network and transfer it in on a schedule. Backups and upgrades are yours, as with self-hosted. Contact us for air-gapped deployment.
Choosing a model
Pick cloud-hosted unless SBOM data has to stay in your own infrastructure. Then pick self-hosted, or air-gapped if that infrastructure has no internet access.
Related
- Reference: Self-hosted installation, Air-gapped configuration