Deployment

Your infrastructure. Your models. Your rules.

Excapia runs privately on infrastructure you control, packaged the way your team operates.

Packaging

Docker all-in-one

One Docker Compose project: server, journey workers, Chromium browser service, PostgreSQL, NATS JetStream and S3-compatible evidence storage. Only the console port is published.

Debian / VM packages

Native packages for virtual machines and bare metal.

Distributed workers

Guided discovery, validation and installation of workers close to the systems they check.

Windows / Linux helpers

Helpers for desktop recording and local execution.

What runs where

Everything in the core box runs inside your network. Model endpoints are ones you configure. Tracston products connect only if you enable them.

Excapia (your network) server · workers · Chromium PostgreSQL · JetStream · evidence store missions · policies · approvals baselines · audit Your appsweb · APIs · data Model endpointcustomer-managed Observatoryoptional Imperiumoptional Otopiaoptional

Local models and customer-managed endpoints

AI features call model endpoints you configure, such as Ollama running on your own GPU nodes.

Adapters for vLLM-compatible servers and hosted APIs are configured per deployment. Using a hosted API is an explicit deployment choice, never an automatic fallback.

Offline needs more than a local model. A local inference server keeps prompts inside your network, but offline operation also requires the tools, packages and credentials a mission needs to be available locally, and valid authority to act. Excapia’s disconnected execution runs under an authority lease.

The Tracston ecosystem, optional

Excapia operates independently. These integrations add context when you already run the other products.

Optional telemetry and investigation context: mission events exported to Observatory, off by default.

Optional AI governance: Imperium policies and shared knowledge-base and reliability services.

Optional agent collaboration integration.

Control

Roles and audit

Administrator, editor and viewer roles, session management and an audit history of changes and approvals.

Policies and contracts

Administrative policy combined with each mission’s contract; dry runs before execution.

SSO and MFA

Single sign-on and multi-factor authentication.

Plan a deployment with us.