$ git diff main -- deployment/self-hosted.md
commit a1b2c3d - author: Oliver Wakefield-Smith - verified 21 Jun 2026
9 of the 19 tracked tools support self-hosted deployment. Of those, only Qodo, Snyk Code, SonarQube Server, Diffblue Cover and DeepSource Enterprise, which publishes an airgapped deployment row, run truly air-gapped. Most "self-hosted" offerings still require an outbound connection for model inference. Verify before assuming it satisfies your security team.
@@ 9 tools with a self-hosted option @@quote-gated where noted
1+CodeRabbit - Enterprise: contact sales (self-hosted, SSO, audit logs)src
2+Qodo - Enterprise: contact sales (on-prem, BYOK, SSO)src
3+Greptile - Enterprise: contact sales (SSO, self-host, custom rules)src
4+Bito - Enterprise: custom, contact us (custom usage limits, Bito hosted / self-hosted / on-prem, multi-org, SSO and SAML)src
5+DeepSource - Enterprise: custom pricing (Enterprise Cloud, self-hosted and airgapped deployment, BYOK for AI Review, SSO, IP restrictions, SLA)src
6+SonarQube - Enterprise: custom pricing, positioned at over 50 developers. SonarQube Server Developer / Enterprise / Data Center editions are licensed per instance per year by LOC.src
7+Snyk Code - Enterprise: contact sales (SSO, on-prem broker, governance)src
8+Launchable - Enterprise: contact salessrc
9+Diffblue Cover - Cover Enterprise: contact salessrc
@@ infra footprint at 50 devs @@typical
1CodeRabbit self-host: k8s cluster, Postgres, Redis. Outbound to chosen LLM provider unless air-gapped variant negotiated.
2Qodo self-host: Docker or k8s, BYOK to your chosen LLM. Air-gapped requires self-hosted inference (vLLM, TGI).
3SonarQube Server: JVM + Postgres + Elasticsearch. Self-contained for rule-based; AI Code Assurance calls out for inference.
4DeepSource Enterprise Server: k8s + Postgres, custom pricing, and the tier where BYOK lands so inference runs on your own infrastructure.
5Bito: the only self-host in the set with a published list price rather than a sales call, at $5/seat/month on top of Professional. On-prem is Enterprise.
@@ the 'self-hosted with outbound' gotcha @@security caveat
1-Several vendors advertise self-hosted but still call the model vendor's API from your VPC. If your security team needs "no data leaves the perimeter", that does not qualify.
2+For true air-gap, see /deployment/air-gapped.
@@ cross-links @@related
1/deployment/byok - bring your own key on self-host
2/deployment/air-gapped - true no-outbound deployments
3/scorecard - full ranking