Deployment

Run FrontBrain AI where your environment allows it to run.

Use hosted SaaS for fast setup, Remote Gateway for private-network execution, or private / self-hosted deployment for stricter control. FrontBrain AI adapts to your network, compliance posture, and appetite for operational control.

Deployment models

Three ways to run it.

SAAS

Hosted SaaS

Fastest way to start.

  • No infrastructure to manage
  • Continuous updates
  • Built-in credits
  • Vault-backed connectors
  • Standard teams, public APIs, cloud workflows, SSH-reachable systems
GATEWAY

Cloud + Remote Gateway

For private infrastructure.

  • FrontBrain AI control plane in the cloud
  • Gateway agent inside your network
  • Outbound TLS only
  • No inbound firewall changes
  • Whitelisted tool surface
  • MSPs, enterprise IT, private networks, hybrid environments
PRIVATE

Self-hosted / private

For regulated or isolated environments.

  • Customer-controlled infrastructure
  • Bring your own Vault, Postgres, object store, model routing
  • VM-based or Kubernetes-friendly
  • Private cloud, regulated industries, sovereign deployments
Remote Gateway requirements

Small VM. Big operational reach.

The gateway runs on a VM you control. It authenticates once, opens a single outbound TLS WebSocket, and runs the tools you whitelist.

  • 2 vCPU
  • 4 GiB RAM
  • 20 GiB disk
  • Ubuntu 22.04 or RHEL 9
  • Docker for sandbox containers
  • Outbound TCP 443

One outbound connection. No inbound holes. Controlled tools only.

gateway install · site-01
$ curl -sSf https://app.frontbrain.ai/gateway/install.sh | sudo bash
Verify install script signatureok
Pull gateway imageok
Register enrolment tokenok
Establish outbound WS sessionlive
Whitelist tools per policynext
Enterprise deployment

Need stricter boundaries? Bring the platform closer.

Private deployments can include dedicated control plane, isolated toolrunners, customer-owned storage, customer-managed secrets, private inference, regional deployment, and custom support arrangements.

Talk to us about deployment
Ready?

Pick the deployment posture that matches your risk.

Start on hosted SaaS. Add a Remote Gateway per site. Move to self-hosted when the compliance line demands it. You do not need to pick everything on day one.

Less dumb. More done.