Container
Run in your container environment with persistent storage.
All solutions
For teams with deployment requirements
Your trust platform. In your environment.
Run the TestifySec Platform in your environment as a container, single binary, VM image, or AWS Marketplace instance. Choose how it runs and where its data lives.
Choose your deployment format
One appliance. Four ways to run it.
Single binary
Run directly on a supported host.
VM image
Deploy an image into your virtual infrastructure.
AWS instance
Deploy in your AWS account through AWS Marketplace.
Explore AWS MarketplaceChoose the package that fits your environment. Confirm its supported runtime, image format, and release during your deployment review.
Deployment architecture
The platform stays inside your boundary.
Run the core services together on one host. Connect developers and CI runners to your own Platform endpoint.
Your teamPlatform UI
CI/lockYour runners and workstationsHTTPS · your Platform endpoint
Your infrastructure
Single host
TestifySec software appliance
The Platform, packaged for local operation.
Web UI + API
Policies + workflows
Identity + signing
Persistent data under your controlSQLite database · evidence files · protected signing material
Before you deploy
What you need to bring.
A practical checklist for your infrastructure and security teams.
A supported runtime
A compatible container runtime, binary host, VM environment, or AWS account. The selected package determines its operating system and architecture requirements.
Persistent storage
A durable, writable data directory for the database, evidence, and signing material. Plan capacity around evidence volume and retention.
Identity and a license
A signed appliance license, an initial administrator, and your chosen login configuration. External identity providers are optional.
DNS, TLS, and connectivity
A stable hostname and certificate trusted by users and runners. Allow HTTPS access and the connections your selected integrations need.
An operating plan
Assign ownership for backups, restore tests, monitoring, updates, certificate renewal, and accurate system time.
A capacity assessment
Use your actual evidence volume, concurrent workflows, and retention period to size the host. Plan high availability separately from the single-host appliance.
Reference evaluation host
2 vCPU / 8 GiB RAM / 40 GiB disk
Ubuntu 24.04 LTS · Linux x86-64
Used for a documented evaluation workload. This is not a production minimum or a capacity guarantee. Size production with your workload.
Network planning
Know what connects.
Local core services reduce external dependencies. Each integration still needs a deliberate network plan.
Users + CI runners
Inbound HTTPS · 443
Your appliance
Configured connections
Your connected services
Keep internal ports private. Signing-service and metrics ports do not need to be open to users or CI runners.
Review each data path. Repositories, identity providers, object storage, email, and AI services may need additional network access. Inbound webhooks may also be required.
Your team operates
The environment
Host, network, data storage, access, monitoring, backups, recovery, and applying updates.
TestifySec provides
The appliance
Licensed software, release packages, documentation, and support under your agreement.
Plan together
The production fit
Capacity, availability, connected services, upgrade procedures, and acceptance criteria.
The packaged appliance runs as one process on one host, without built-in failover. Multi-replica deployments require a separately planned architecture.
Your next step
Plan an appliance evaluation.
Bring one real workflow. We’ll work through the fit with your team.
Start with your challenge
What do you need
to trust next?
Choose the problem you are solving. See where TestifySec fits and how to get started.
Engineering teams
Bring AI code into your workflow with confidence.
Require evidence that the checks ran before a push reaches your repository.
Protect your next pushPlatform teamsKeep requirements consistent as teams grow.
Manage the gates across your repositories from one place.
Bring your gates togetherSecurity and assurance teamsShow that technical controls actually work.
Connect recovery tests and remediation checks to the controls they support.
Turn tests into evidenceTeams with deployment requirementsRun the platform in your environment.
Explore the software appliance and plan for your data, network, and operating needs.
Explore the appliance