Skip to main content

Vulkro Cloud on your own servers

Vulkro Cloud, with both the Salesforce and the Core app, can also run on your own infrastructure. Your code, your org data and your results stay on your servers. Talk to us at license@vulkro.com or request access: our team sets it up with you.

What is different from the hosted service​

  • Your infrastructure, your database. It runs as one application on your servers, with its own database (SQLite or PostgreSQL).
  • Single sign-on through your identity provider over OIDC. An identity provider that speaks only SAML connects through an OIDC bridge such as Dex.
  • One call home: the licence check. About every 6 hours the installation checks its licence. That call sends counts only: members, connections, scans, repositories, tracked branches and seats in use, with the installation's id, version and licence state. It never sends code, findings or org data.

If the licence lapses​

After a 14-day grace period, the installation drops to the Free tier:

  • Code scanning continues on the most recently scanned repository. The other repositories' schedules pause.
  • Salesforce live-org scans stop, and new orgs cannot be connected.
  • Your data stays. Existing results, issues and exports keep working.

Two states are treated differently, because both mean something is wrong with the installation: a licence with an invalid signature, and a clock that has been turned back. In either, scans and changes pause until it is fixed, while sign-in, viewing and the licence page stay available.