On-Premise
Run SimpleRisk on your own infrastructure
Keep your GRC data where you control it. Your servers, your keys, your jurisdiction, and your own security controls in front of it.
Why on-premise
Sovereignty is about control, not just location
For many teams, the deciding question is not where the data sits. It is who controls it. Running SimpleRisk on your own infrastructure means the answer to every one of those questions is you.
It is also the natural fit when your security posture is built on controls you already run: your network, your identity provider, your monitoring, your encryption. On-premise puts SimpleRisk behind them, not beside them.
You stay in control of:
- The encryption keys and where they live
- The legal jurisdiction your data falls under
- Exposure to third-country access requests
- Your own network, identity, and monitoring controls
- Whether you can export, migrate, or exit, always (open-source roots)
How it runs
Start free, add what you need
On-premise is a deployment choice, not a price tier. You can run the free, open-source Core on your own servers at no cost, then add paid Extras and support as your program matures. Install via scripted setup, a virtual machine, Docker, or a manual install across Unix, Linux, and Windows.
- Your responsibility. Monitoring availability, backups, and scheduling upgrades.
- Paid Extras available. Incident Management, Vulnerability Management, SSO and LDAP, and more, when you want them.
- Support with paid. Guaranteed response, not just email.
Open Source vs On-Premise vs SaaS
Three ways to run SimpleRisk. Pick the one that fits how your team works.
| Open Source | On-Premise | SaaS | |
|---|---|---|---|
| What it is | The free, open-source edition (SimpleRisk Core) | SimpleRisk on your own infrastructure | SimpleRisk, fully managed in our cloud |
| Cost | Free, unlimited users | Free or paid | Paid |
| Runs on | Your infrastructure | Your infrastructure | Our AWS cloud |
| You manage | Install, backups, upgrades | Install, backups, upgrades | Nothing, we run it |
| Upgrades | Manual (one-click if registered) | You schedule (one-click if registered) | Automatic |
| Backups | Yours | Yours | Daily snapshots |
| Paid Extras | Not available | Available | Available |
| Support | Email only, no SLA | Included with paid | Included |
| Best for | Evaluating, or DIY and budget-conscious teams | Data sovereignty and reliance on your own security controls | Teams that want the platform without the operational overhead |
| Get started | Download | Schedule a discovery call | Start a free trial |
Keep your GRC data on your terms
Talk through your infrastructure and sovereignty requirements with our team, and we will map the right path.
Schedule a discovery call