Skip to main content
← Back to Blog

Air-Gap Deployment: What It Actually Means

Most "air-gap compatible" tools still phone home for license checks, font loading, or analytics. Here is what true air-gap means and why it matters for defense programs.

Air-gap deployment means an application runs with zero external network dependencies: no CDN requests, no analytics, no license-validation pings. Defense programs in classified or controlled environments cannot allow any outbound traffic, so a single HTTP request disqualifies a tool. The test is simple: disconnect the network cable and try every feature; if anything breaks, it is not air-gap compatible.

What does air-gap deployment mean?

Air-gap deployment means the application runs with zero external network dependencies. Zero. Not "minimal." Not "just a CDN for fonts." Not "only a license validation ping on startup." Zero.

Why do defense programs require air-gap operation?

This matters because defense programs operating in classified or controlled environments cannot allow any outbound network traffic from the application. A single HTTP request to a CDN, analytics endpoint, or license server means the tool cannot be deployed in that environment. Period.

Where Hitt Hosting SE stands on air-gap

Hitt Hosting SE does not offer an air-gap install yet. A self-hosted, disconnected install is on the roadmap and is being built to the standard above. Some features still call outside services today: orbit data refreshes pull from CelesTrak and NOAA, and the AI features rely on an external LLM. Those have to work offline or be switched off before the install can pass the test below.

DependencyWhere it stands
FontsBundled locally via @fontsource: no Google Fonts CDN
AuthenticationA local Supabase instance in the planned install
Engineering calculatorsRun client-side, no server round-trips
Orbit dataPulled from CelesTrak and NOAA today
AI featuresCall an external LLM today
UpdatesSigned archives applied offline: planned, not built

How do you test whether a tool is air-gapped?

If your program requires air-gap deployment, the test is simple: disconnect the network cable and try every feature. If anything breaks, it is not air-gap compatible.

More from the Blog

Trade Studies: How Systems Engineers Defend the Decisions That Shape a Program

Almost every consequential decision on a program, which architecture, which supplier, which redundancy scheme, is a choice among alternatives that were never equally good. A trade study is the discipline that turns that choice from an argument won by seniority into a decision defended by evidence.

Configuration Management: Why a Baseline Is a Promise, Not a Snapshot

Every program says it has baselines. Far fewer can answer, on demand, exactly what was in the baseline that a given design decision was made against. Configuration management is the difference between a baseline that governs the program and a folder of documents that merely records where it once was.

Automotive SPICE: The Process Standard That Sits Beside ISO 26262

ISO 26262 tells an automotive program how safe its systems must be. Automotive SPICE asks a different and equally demanding question: is the process that develops them mature enough to be trusted? Passing one and failing the other is how a supplier loses a program it was technically capable of delivering.

Ready to try it?

Start a free 30-day pilot and see how Hitt Hosting SE handles your mission data.

Start Your PilotSee Features