Open-Core
Best for: teams that require self-hosted control and deep platform customization.
- Run in your infrastructure
- Community support and docs
- Transparent architecture and source
Deployment Models
Choose your control boundary without changing operating model
Identrail keeps the same trust-path workflow across open-core, hosted SaaS, and enterprise deployments. Choose based on control, speed, and governance requirements.
Hosted SaaS
Best for: fastest time-to-value with managed operations.
- Managed platform operations
- Read-only onboarding for first scan
- Accelerated query and collaboration workflows
Enterprise Private
Best for: private tenancy, procurement controls, and advanced support programs.
- Private deployment options
- SCIM and advanced governance controls
- 24/7 support and named TAM
Capability Matrix
Deployment differences by capability
Use this matrix to align your deployment choice with security controls, data residency, and support needs.
| Capability | Open-Core | Hosted SaaS | Enterprise |
|---|---|---|---|
| AWS IAM role discovery | Included | Included | Included |
| Kubernetes RBAC and service account mapping | Included | Included | Included |
| Git repository credential exposure scanning | Basic detectors | Advanced signatures + workflows | Advanced + custom signatures |
| Trust graph explorer | Included | Included + hosted query acceleration | Included + custom graph retention |
| Hosted SaaS | No | Yes | Yes |
| SSO/SAML + SCIM | No | SAML | SAML + SCIM + advanced controls |
| Data residency options | Self-host control | US + EU | Regional + private tenancy |
| Support and SLAs | Community | Business-hour support | 24/7, named TAM, custom SLA |