Skip to Content
Internal Scanning AgentDeployDeployment Options

Deployment Options

Choose your deployment method based on your infrastructure. The Internal Scanner runs on Kubernetes and can be deployed to any cloud provider or on-premises environment.

Resources

ResourceDescriptionLink
Terraform Module (AWS)Production-ready module for EKS deploymentTerraform Registry 
Terraform SourceModule source code and examplesTerraform/AWS
Helm ChartsCharts for any Kubernetes clusterHelm

Deployment Matrix

PlatformTerraform ModuleHelm Chart
AWS (EKS)AvailableAvailable
Self-Managed / On-Premises-Available

Azure and GCP: Terraform modules for Azure and GCP are planned. For now, deploy on these platforms using the Helm chart.

Choose Your Path

Our Terraform modules  provide an all-in-one deployment that creates the Kubernetes cluster and deploys the scanner:

  • Infrastructure as Code - Version-controlled, repeatable deployments
  • Automated setup - DNS, TLS certificates, networking configured automatically
  • Best practices - Security, scaling, and monitoring built-in

Best for: New deployments on AWS.

Helm Chart (For Existing Clusters)

If you already have a Kubernetes cluster or need to deploy on-premises, use our Helm chart directly:

  • Flexible - Works with any Kubernetes 1.29+ cluster
  • Integrate with existing infrastructure - Use your own ingress, TLS, and DNS
  • On-premises support - Deploy in your data center

Best for: Existing Kubernetes clusters, on-premises deployments, unsupported cloud providers.

Cloud Provider Guides

AWS

Deploy to Amazon Web Services using EKS (Elastic Kubernetes Service):

  • Terraform - Production-ready module with EKS Auto Mode

Self-Managed / On-Premises

Deploy to any Kubernetes cluster using our Helm chart:

Next Steps

  1. Follow your cloud provider’s deployment guide
  2. Configure scan targets after deployment
Last updated on