Deployment options

Same platform. Same price. Your choice of where.

Run Lumen Edge as a dedicated SaaS instance, in your own data center, or fully disconnected. You never trade features for control, and you never pay more for it.

Book a demo
Fastest time to value

SaaS

A dedicated, single-customer instance operated by Lumen Edge in the region of your choice. Only lightweight sensors run in your network.

  • Dedicated instance with no shared application tier
  • Hosting region of your choice
  • Upgrades, backups and monitoring included
  • Live the same day
Full data control

On-prem

The complete platform (console, analysis pipeline and data stores) inside your data center or private cloud, managed by your team with our support.

  • All data stays inside your perimeter
  • Identical features to SaaS
  • Guided installation and upgrades
  • Fits strict data-residency rules
Regulated, OT & classified

Air-gapped

For networks without internet access. Offline installation and updates, with scan results moved by manual upload where sensors cannot reach the console.

  • No internet connectivity required
  • Offline update bundles
  • Manual result upload per site
  • Available on the Enterprise plan

Side by side

Compare deployment models

SaaSOn-premAir-gapped
Every integration and module
Correlation engine & approval workflow
Multi-tenancy & role-based access
Where the platform runsLumen Edge-operated, your regionYour data center / private cloudYour isolated network
Who operates upgradesLumen EdgeYou, with our supportYou, with offline bundles
Internet connectivity neededSensors → console (outbound)Optional
PricingPer assetPer asset, same pricePer asset (Enterprise)

Sensors

The only thing that always runs on your side.

Whatever the deployment model, sensors sit where your networks are and do the collecting. They are designed to be easy to approve with your network and security teams.

Runs anywhere

Windows, Linux, macOS or as a container, on a VM, a small appliance or an existing server.

Outbound only

Pulls tasks over HTTPS. No inbound firewall rules, proxy-aware.

No stored secrets

Integration credentials live in the console and are delivered per task.

One per segment

Deploy per site, VLAN, DMZ or OT zone. One sensor covers thousands of assets.

Onboarding

Accelerated deployment, whichever you choose.

  1. 01

    Initial setup

    We provision your SaaS instance in your region, or install on-prem together with your team.

  2. 02

    Onboarding

    Structured training for analysts and administrators, tailored to Security, GRC and IT roles.

  3. 03

    Implementation support

    Integration tuning, approval policies, dashboards and reports during rollout.

  4. 04

    Value realization

    Regular reviews to make sure coverage, hygiene and savings goals are met.

FAQ

Deployment questions

Do we need to install agents on our endpoints?
No. Lumen Edge uses network discovery and the integrations you already run. You only deploy lightweight sensors, typically one per site or network segment.
What network access does the sensor need?
Outbound HTTPS to your Lumen Edge console (directly or via a proxy), plus access to the subnets you want to scan and the APIs of the tools you connect. Nothing needs to connect inbound.
Where is SaaS data hosted?
Each SaaS customer gets a dedicated instance in the region they choose. Tell us your data-residency requirements and we will confirm the options.
Is on-prem more expensive?
No. Pricing is per asset and identical for SaaS and on-prem. Air-gapped deployments are part of the Enterprise plan because they require offline update logistics.
Can we start in SaaS and move on-prem later?
Yes. The platform is the same, so we can migrate your configuration and inventory between deployment models.

Not sure which model fits?

Tell us about your environment and constraints, and we will recommend a deployment and walk you through it.

Book a demo

SaaS or on-prem · no endpoint agents · every module included