Choose how to run Legit AI
In Legit AI's cloud, on your own server, or on a server with no internet — what each way needs and where it starts.
Legit AI runs the same way in all three places: the same detection, the same console, the same AI analyst. What differs is who runs the server and what it can reach.
| Legit AI’s cloud | Your own server | Air-gapped server | |
|---|---|---|---|
| Who installs it | Nothing to install | Legit AI, remotely or on site | Legit AI, on site |
| Internet on the server | — | Optional | None needed, ever |
| Windows computers | The agent, over HTTPS | The agent, over HTTPS | The agent, over HTTPS |
| Linux servers over SSH | Only servers reachable from the internet | Any server it can reach | Any server it can reach |
| Syslog straight from firewalls and switches | Through a relay you run | Yes, on port 514 | Yes, on port 514 |
| The AI model | Not running in the cloud yet: analyses are built from each alert’s own facts (FALLBACK) | Runs on your server | Runs on your server |
| Updates to rules and threat intelligence | Applied by Legit AI | A signed bundle, applied in the console | A signed bundle on removable media, applied in the console |
Legit AI’s cloud
Section titled “Legit AI’s cloud”Create an account on the website: choose a user name and password, tick that you accept the Terms of Service and the Privacy Policy, then set up two-factor sign-in with an authenticator app. You are the administrator of your own organisation at once; nothing is installed. Then follow the Quickstart.
The platform reaches out to your machines only over SSH, so servers you want watched without an agent must accept SSH from the internet. Machines that cannot, and devices that only send syslog, are covered on your own server.
Your own server, with or without internet
Section titled “Your own server, with or without internet”Legit AI’s engineers install the whole platform — the console, the API, the database, the detection engine and the AI model — on one Linux server in your network: remotely, or on site for a server with no internet. You prepare the server and receive the running platform; there is nothing to build or configure yourself.
Leave a request, check the requirements, and see how the installation goes.