Skip to content
Holistra

Deployment

Our cloud or your data centre

The same Holistra platform runs two ways. Choose the one that fits your regulator, your risk appetite and your team.

Cloud service

We run and update the platform. Your organisation is provisioned by our team and isolated from every other customer in the application and in the database.

  • Fastest start: no servers to provision.
  • Platform and threat-intelligence updates applied for you.
  • Agents connect to your organisation over HTTPS.
  • Single sign-on, SCIM and two-factor authentication.

Dedicated instance, on your premises

A single-tenant Holistra that runs on infrastructure you control and is activated with a licence key we issue to you.

  • Scan results, assets and reports stay on your own servers.
  • Your agents report only to your instance.
  • Your administrator decides when threat-intelligence and agent updates are installed.
  • Jira two-way sync available.

Data residency

Know where your data lives

Data sovereignty matters to banks and governments in the region. With a dedicated instance, your findings never leave your network.

A dedicated instance still needs a small amount of outbound connectivity: licence validation and signed threat-intelligence and agent-release updates from Holistra. Agent software inventories can be matched against the public OSV database or a mirror you host.

For the cloud service, ask us where your data is hosted and how it is protected; we will document it as part of your contract.

Getting started

From first call to first findings

  1. 01

    Demo

    A walkthrough of the platform and a conversation about your environment and obligations.

  2. 02

    Scope

    We agree the assets, scan types and deployment model for a pilot.

  3. 03

    Provision

    We create your organisation, or issue a licence for your own instance.

  4. 04

    Assess

    Run your first scans, enrol agents and review prioritised findings together.

Not sure which model fits?

Tell us about your environment and regulatory requirements, and we will recommend the right deployment.