Skip to main content
← Back to Blog

Air-Gap Deployment: What It Actually Means

Most "air-gap compatible" tools still phone home for license checks, font loading, or analytics. Here is what true air-gap means and why it matters for defense programs.

Air-gap deployment means an application runs with zero external network dependencies: no CDN requests, no analytics, no license-validation pings. Defense programs in classified or controlled environments cannot allow any outbound traffic, so a single HTTP request disqualifies a tool. The test is simple: disconnect the network cable and try every feature; if anything breaks, it is not air-gap compatible.

What does air-gap deployment mean?

Air-gap deployment means the application runs with zero external network dependencies. Zero. Not "minimal." Not "just a CDN for fonts." Not "only a license validation ping on startup." Zero.

Why do defense programs require air-gap operation?

This matters because defense programs operating in classified or controlled environments cannot allow any outbound network traffic from the application. A single HTTP request to a CDN, analytics endpoint, or license server means the tool cannot be deployed in that environment. Period.

How Hitt Hosting SE achieves true air-gap operation

Hitt Hosting SE's self-hosted deployment achieves true air-gap operation. Fonts are bundled locally via @fontsource (no Google Fonts CDN). Authentication runs on a local Supabase instance. All 50+ engineering calculators run client-side with no server round-trips. There is no analytics, no telemetry, no license phone-home.

Updates are delivered as signed archive files that can be transferred through approved media and applied without an internet connection. The application runs identically whether connected to the internet or completely isolated on an internal network.

DependencyHow it is handled
FontsBundled locally via @fontsource — no Google Fonts CDN
AuthenticationLocal Supabase instance
Engineering calculatorsAll 50+ run client-side, no server round-trips
Analytics / telemetryNone
License checksNo phone-home
UpdatesSigned archives applied offline via approved media

How do you test whether a tool is truly air-gapped?

If your program requires air-gap deployment, the test is simple: disconnect the network cable and try every feature. If anything breaks, it is not air-gap compatible. Hitt Hosting SE passes this test.

More from the Blog

Trade Studies: How Systems Engineers Defend the Decisions That Shape a Program

Almost every consequential decision on a program, which architecture, which supplier, which redundancy scheme, is a choice among alternatives that were never equally good. A trade study is the discipline that turns that choice from an argument won by seniority into a decision defended by evidence.

Configuration Management: Why a Baseline Is a Promise, Not a Snapshot

Every program says it has baselines. Far fewer can answer, on demand, exactly what was in the baseline that a given design decision was made against. Configuration management is the difference between a baseline that governs the program and a folder of documents that merely records where it once was.

Automotive SPICE: The Process Standard That Sits Beside ISO 26262

ISO 26262 tells an automotive program how safe its systems must be. Automotive SPICE asks a different and equally demanding question: is the process that develops them mature enough to be trusted? Passing one and failing the other is how a supplier loses a program it was technically capable of delivering.

Ready to try it?

Start a free 30-day pilot and see how Hitt Hosting SE handles your mission data.

Start Your PilotSee Features