S4E Self HostedEarly access
The same scanner,
on your own servers.
Run the S4E console inside your network. Scan from the outside and from the inside, keep every finding on premises, and license it with a signed offline file.
Who it is for
When the scanner has to live where the servers live.
Teams that cannot send findings to a cloud
Regulated industries, public sector and anyone whose policy says scan data stays on premises.
Teams replacing a per-seat scanner
One console for web, network and host checks, instead of a desktop scanner licensed per user.
MSSPs and multi-site operators
Self Hosted Enterprise adds tenants, white-label reporting and air-gapped installs.
Two editions
Self Hosted, or Self Hosted Enterprise.
Both run on your infrastructure. One is a self-serve package for a single team, the other is the full platform for organisations with tenants, sites and air gaps.
S4E Self Hosted
A reduced stack for one team. Outside and Inside depth, AI fix recommendations, up to 50 assets and 5 users, one Connector included. No continuous scanning, web crawling, PDF export or public API. Self-serve install, signed offline license file. Early access
S4E Self Hosted Enterprise
Today's full S4E stack on your infrastructure: continuous monitoring, scheduling, web crawling, reports, public API, multi-tenant, white-label, unlimited users and Connectors. Air-gapped installs supported. Scoped with you.
Need the full feature list side by side? Compare the two editions.
What is included
Everything a single team needs.
Outside depth
Network services and the web app as seen from the internet, from the same check library as S4E Cloud.
Inside depth
Authenticated host scan over SSH or WinRM: installed packages, OS, CVEs and remediation. No agent to install.
AI fix recommendations
Every finding comes with plain-language remediation and the exact fix.
One S4E Connector
Reach servers in another network segment or branch office. More Connectors can be added.
Signed offline license
A license file you install once. Scanning and the license work without a connection to S4E. AI fix recommendations, vulnerability feeds and new versions need outbound internet access.
Docker compose install
Runs on a single Linux host with docker compose. Updates ship as new image versions.
Offline license
Install once. No call home.
S4E Self Hosted is licensed with a signed file, not a cloud account. Scanning and the license work without a connection to S4E; AI fix recommendations, vulnerability feeds and new versions need outbound internet access.
1. Request early access
Tell us about your environment. Self Hosted ships in 2027; early access customers get builds first.
2. Receive the license file
We sign a license file for your organisation with the asset and user limits of your package.
3. Install and activate
Start the stack with docker compose and drop the license file in. The console runs without an S4E Cloud account.
Get in early.
Early access customers shape the package and get the first builds. Pricing is on the plans page.