DeepSource Enterprise Server is the self-hosted version of DeepSource for customers who have compliance or security needs that require them to operate within their firewall, in a private cloud (AWS, GCP, Azure), or in a data center.

DeepSource Enterprise Server can be set up in approximately 20 minutes and provides the same features as DeepSource’s cloud offering but operates within your private cloud.


License Key

A license key is required for on-premise deployments. Please request a license here (or) schedule a product demo to obtain a license.

System Overview

DeepSource Enterprise Server comes bundled with a host of services, which can be roughly divided into three categories:

Application Services

The DeepSource application is served by the application services.

bifrostFrontend server
asgard-apiBackend for the DeepSource GraphQL API service
asgard-celery-*Celery worker pools for asynchronous tasks
atlasOrchestrator service that integrates with Kubernetes control plane for analysis, transformer, and Autofix™️ jobs
janusWebsocket server for realtime results feedback
materWatches for webhook failures from VCS providers and retries them


The application services depend on these core services to function.

minioObject storage for application assets
pgbouncerConnection pooler for PostgreSQL database connections
RabbitMQMessage Queue. Forms a critical bridge between all DeepSource application services.
RedisCache database

KOTS Services

KOTS services are used to install and manage the DeepSource Enterprise Server installation. These services also enable updates to the system, as well as license management. More information about KOTS can be found here.

kotsadmAdmin console to install, configure and manage the DeepSource Enterprise Server installation
kurl-proxyProxy service for kotsadm (for standalone cluster installations)
kotsadm-minioObject storage for the KOTS Admin Console (for existing cluster installations)
kotsadm-rqliteRQLite database service for KOTS admin console

Network connectivity


DeepSource Enterprise Server installation can be kept behind network firewalls with zero-to-limited ingress. Typically, customers keep their installation behind a VPN.


On non-airgapped installations, the DeepSource Enterprise Server makes outbound connections to the following:

  1. Our image registry, through proxy.replicated.com
  2. The DeepSource Cloud instance, for raising support tickets and reporting false positives
  3. Sentry, if enabled

and more. Here is an exhaustive list.