Agent Deploy Paths
The ways to stand up your self-hosted agent fleet, including zero-access in your own cloud.
Agents run on infrastructure you control, and you can stand them up whichever way fits the job. A new host enrolls itself into your fleet with a single token.
Deploy paths
- Raspberry Pi on-site, for internal and on-premises work.
- A cloud VM you launch, self-enrolling with a single token.
- A container, for ephemeral or scripted setups.
- Zero-access, BYO-cloud: run the whole platform inside your own cloud account, with no data path out.
Whichever path you choose, engagement traffic and evidence stay on your hosts and networks, reaching your environment over your own Tailscale tailnet or a hardened public mTLS edge.