Self-hosted agents

Build your own CI/CD platform behind the security of your company firewall while still enjoying the simplicity and power of Semaphore.

Watch video

Get full control over CI/CD

Host your own agents and customize the environment where you run your jobs. With self-hosted agents, you can create custom configuration to scale up when running larger jobs, all within your own network.

Unidirectional communication

Communication always goes from the agent to Semaphore. We will never force you to open your firewall to the Internet.

Encrypted by default

All communication, tokens, messages, and logs are fully encrypted. Enjoy the enterprise-level of security offered by Semaphore.

Open source

Semaphore agents are built in the open. Your security team can review and approve every design decision.

CVE discovery

If any CVE is discovered, Semaphore gives you the ability to shutdown and block all affected agents.

Operation halting

You have full control. In case your team notices something suspicious, Semaphore offers a master switch that instantly and completely halts all operations.

Only necessary access

Semaphore follows the principle of least privilege. Every token that is used for communication is restricted to the minimal sets of actions it needs.

Always have as many agents as you need

By scaling up to thousands of agents during the day and scaling down to zero agents during the night or at the weekend, the system dynamically adapts to your CI/CD needs