Get full control over CI/CD

Host your own agents and customize the environment where you run your jobs. With self-hosted agents, you can create a custom configuration to scale up when running larger jobs, all within your own network.

Unidirectional communication

Communication always goes from the agent to Semaphore. We will never force you to open your firewall to the Internet.

Encrypted by default

All communication, tokens, messages, and logs are fully encrypted. Enjoy enterprise-level security with Semaphore.

Open source

Semaphore agents are built in the open. Your security team can review and approve every design decision.

CVE discovery

If any CVE is discovered, Semaphore lets you shutdown and block all affected agents.

Operation halting

You have full control. If your team notices something suspicious, Semaphore offers a master switch that instantly and completely halts all operations.

Only necessary access

Semaphore follows the principle of least privilege. Every token that is used for communication is restricted to the specific set of actions it needs.