Self-hosted agents
Build your own CI/CD platform behind the security of your company firewall while still enjoying the simplicity and power of Semaphore.
Get full control over CI/CD
Host your own agents and customize the environment where you run your jobs. With self-hosted agents, you can create custom configuration to scale up when running larger jobs, all within your own network.
Unidirectional communication
Communication always goes from the agent to Semaphore. We will never force you to open your firewall to the Internet.
Encrypted by default
All communication, tokens, messages, and logs are fully encrypted. Enjoy the enterprise-level of security offered by Semaphore.
Open source
Semaphore agents are built in the open. Your security team can review and approve every design decision.
CVE discovery
If any CVE is discovered, Semaphore gives you the ability to shutdown and block all affected agents.
Operation halting
You have full control. In case your team notices something suspicious, Semaphore offers a master switch that instantly and completely halts all operations.
Only necessary access
Semaphore follows the principle of least privilege. Every token that is used for communication is restricted to the minimal sets of actions it needs.
Always have as many agents as you need
By scaling up to thousands of agents during the day and scaling down to zero agents during the night or at the weekend, the system dynamically adapts to your CI/CD needs