Skip to content
LEGIT AIDOCS
Open the console

Run Legit AI on your own server

Legit AI's engineers install the whole platform — the AI model included — on a server in your network, remotely or on site, with or without internet.

Legit AI’s engineers install the platform for you. You prepare a server; we install it, check it and hand it over. Nothing is downloaded from the internet during the installation, so the same installation serves a server with internet and one that never has it.

  1. Request it. Leave a request with the size of your estate and whether the server has internet. We agree on the server and a date.

  2. Prepare the server. A Linux server that meets the requirements, and the address people will open the console at — a name in your DNS, such as legit.corp.internal. If your organisation has its own certificate authority, have a certificate and key for that name ready.

  3. The installation.

    • Remotely, for a server our engineer can reach: open SSH to it from the address we give you, for an account with administrator rights, for the time of the installation. Close it again when we are done.
    • On site, for an air-gapped server: our engineer brings the platform on removable media and installs it at your premises.
  4. Handover. You receive the console’s address and the first administrator’s sign-in. Sign in, change the password and add your team in Admin → Users.

The installation takes about an hour, most of it copying the platform and its AI model to the server.

The console and the API Over HTTPS at your address
The detection engine and the database On the same server
The AI model Chosen for the server’s memory and GPU — see Requirements
Syslog receiver Port 514, for firewalls, switches and servers
Detection rules and threat intelligence From a bundle signed by Legit AI
Nightly backup Of the whole platform, the last 14 kept on the server

What arrives on your server is the running platform: no source code and no access to Legit AI’s repositories. Every file is checked against its checksum before anything is installed, and every later update must carry Legit AI’s signature.

  • Your data. Events, alerts and investigations stay on your server; Legit AI does not see them. Support works only with what you show us in a session you open.
  • No outside calls. The platform runs in air-gap mode and makes no call of its own to the internet. On a server with internet, its lookups — IP location, the Tor exit list, vulnerability feeds — can be switched on at your request.
  • Backups. They stay on the server. At handover we show your IT team where they are, so they can be copied off as your policy requires.