Run ZentraLink on your own infrastructure.

Air-gapped install on Ubuntu / Debian / RHEL. Same dashboard, same SCIM endpoints, same provider integrations — your data never leaves your network. We're qualifying the first cohort now; join the waitlist to get a setup call within two weeks of GA.

Join the waitlist Talk to enterprise sales

Why we're building this

Regulated industries (finance, healthcare, public sector) frequently can't put domain operations on a hosted SaaS even when the SaaS is GDPR-clean. Self-hosted lets the same teams use the same product without changing their data-classification regime.

Air-gap / classified-network ready — no outbound call-home
Same Postgres + Node stack as our SaaS, single binary install
Ed25519-signed license file, validated at startup — no internet round-trip; an expired licence degrades the install to read-only rather than killing the binary
Quarterly tagged releases, 18 months of security backports

What's in scope at GA

Self-hosted ships with the same feature set as our hosted product, with three changes: integrations require operator-supplied credentials, AI features are off by default, and SCIM endpoints expose your own hostname.

Domain registry + DNS management
All eleven provider integrations. Approval workflows, snapshots, audit log.
SSL + mail security monitoring
Continuous scans. SPF / DKIM / DMARC / DNSSEC.
SSO + SCIM
SAML / OIDC. Full SCIM 2.0 surface under your own hostname.
Audit log streaming
Local file rotation + signed-webhook target. Drop directly into your SIEM.
Reports
PDF + CSV, branded with your company. No call-home.
Public API + webhooks
Same OpenAPI schema as SaaS. Local DNS + local-only token issuance.

Common questions

What enterprise security teams ask first.

When will it be generally available?
We're targeting Q3 2026 for general availability. Early-access customers get a dedicated rollout window from Q2 and shape the install profile we ship.
What does the install look like?
Single binary + Postgres 15+. Ubuntu 22.04 / 24.04 LTS, Debian 12, RHEL 9. Container image with the same content for air-gapped Kubernetes.
How is licensing handled?
Annual licence file, signed and validated at startup. No internet round-trip; the binary boots in a fully isolated network.
Do you offer support?
Yes — same SLAs as our hosted enterprise tier. Quarterly upgrade calls, on-call escalation for production-down incidents.
What does it cost?
Per-seat, per-domain or fixed-bundle. Procurement-friendly — we tailor the contract to your acquisition framework.

Waitlist

Join the self-hosted early-access cohort.

Tell us about your network topology and compliance regime. We respond within one working day and schedule a 30-minute call to qualify fit.

Join the waitlist Read the security page

Early-access cohort is limited · qualified customers only · no waiting-list spam