Self-hosted runner

A self-hosted runner is an agent you enrol inside your own network. SecNxt routes scans of private or internal targets to it, so sensitive code and traffic never leave your environment.

It is essential for testing internal apps, private cloud and anything you can't (or shouldn't) expose to the public internet.

You enrol a runner, which registers with SecNxt and waits for work.

When a scan is marked for external execution, the runner claims the job, runs the engine locally, and posts findings and heartbeats back over the runner API.

1. 1Open the Runners area and enrol a new runner.
2. 2Install and start the runner inside your network following the on-screen instructions.
3. 3Confirm it reports healthy (heartbeat).
4. 4Launch scans against internal targets and route them to the runner.

• Testing internal-only web apps and APIs.
• Keeping regulated data inside your network during assessments.

• Keep at least one healthy runner online so scheduled internal scans don't stall.

What leaves my network?

Only the findings and status the runner reports back — the target data stays local.