Skip to main content

    Managed GitHub Enterprise, inside your own boundary.

    GitHub Enterprise Server deployed inside your authorization boundary and operated as a single-tenant dedicated instance. iTmethods runs the substrate. Reign Gateway governs Copilot and the rest of the coding-agent fleet at the call layer.

    Delivered as a single-tenant dedicated instance, in your own AWS or Azure cloud account or in infrastructure iTmethods operates. Both are available today. Google Cloud is planned for 2027. Air-gapped and sovereign are in development.

    The decision

    Enterprise Server, and who actually operates it.

    Most GitHub estates that need to move do not need to change product. They need the same product somewhere else, run by someone whose job it is.

    01Nobody has to learn a new tool
    Your engineers keep GitHub. The workflows, the Actions, the review process and the muscle memory all survive the move.

    That matters more than it sounds. The usual reason a source-control migration fails is not the migration, it is the retraining that follows it.

    02The estate moves inside your boundary
    Enterprise Server runs inside your authorization boundary rather than under a vendor's operational control.

    Code outside the boundary carries someone else's security posture. Inside it, the posture is yours and it can be audited by your own people.

    03Actions is the part that needs the most care
    Runners execute your code. They are the most consequential thing on the platform and the easiest to leave loose.

    Isolated per environment, short-lived OIDC tokens, no long-lived registration secrets, and no shared execution surface between environments that should not see each other.

    04Copilot is already in the repository
    The coding agents your engineers adopted are reading and writing the same code as the people are.

    You do not have to remove them. You have to be able to say what they reached, under what policy, and when.

    Deployment

    Two shapes. One operating posture.

    The governed posture does not change when the shape does. What changes is where the substrate sits, and only one of the two is something you can have today.

    ShapeWhat it isStatus
    Single-tenant dedicated instance, in our environment Provisioned for one customer and serving that customer only, in infrastructure iTmethods operates. Your identity provider, your repositories, your policy, our operations. Available today
    Single-tenant dedicated instance, in your own cloud account The same instance, provisioned in your own AWS or Azure account. The account is yours and the billing relationship with the cloud provider is yours. Google Cloud is planned for 2027. Available today
    Air-gapped and sovereign Air-gapped deployment and sovereign deployment. Two shapes, in development together. In development
    Neither of the two in development is available, neither is being sold, and we are not offering a date. There is no multi-tenant or shared option at any tier. Deployment options states which is which →
    The hardening sheet

    What Reign Ops applies on day one.

    Twelve named controls, each policy-as-code rather than manual configuration. Five are below. The full deliverable, with framework mapping, topology diagrams and sample policy excerpts, is the hardening sheet.

    Identity boundary bound to your provider.

    SAML or OIDC at the platform edge, on the protocol you already run, with SCIM where you use it.

    Allow-listing at both edges.

    At the platform edge and at the runner edge, so the execution surface is bounded as tightly as the console is.

    Actions runners isolated per environment.

    Short-lived OIDC tokens, no long-lived registration secrets, and no shared execution surface between environments.

    Audit log streamed to your SIEM.

    The GitHub audit log goes to the system your security team already watches rather than staying in a console.

    AI coding tools governed at the call layer.

    Copilot and the rest of the fleet route through Reign Gateway. The section below is what that means in practice.

    And seven more.
    Code scanningBranch protectionApproved-model registryData classificationEgress controlsBackup and disaster recovery

    Plus a periodic hardening review with your team.

    The complete control set, with framework mapping and sample policy excerpts. GitHub on Reign Ops hardening sheet →

    The AI coding tools

    Productivity multipliers, and the newest way code leaves.

    Copilot, Cursor, Claude Code and the rest of the coding-agent fleet read and write your source code at machine pace. Reign Gateway governs them at the call layer, which is the one place a policy can apply to all of them at once, whoever built them.

    What the boundary adds
    Every call routed through Reign Gateway: identity-bound, content-classified, and policy-enforced before the model sees the code. For each one the record carries the identity that made it, the policy that applied, the decision taken, the model that answered and the time it happened. You author the catalog of tools the organization sanctions; the boundary enforces it.
    The part worth being precise about. This governs the coding tools your own engineers run. It is not a claim that those tools are safe, and it does not make an unapproved model approved. iTmethods makes no compliance, certification or accreditation claim under any framework. How the boundary works → · Regulatory alignment →
    Where Reign Factory fits

    The same instance, with work arriving in it.

    Reign Ops is sold and operated on its own terms, and a customer who never adopts Reign Factory loses nothing here. But this is the platform Factory hands work to.

    What Factory does against a governed GitHub Enterprise. It works an item you assign in an isolated environment, with Reign Gateway on the model path, and opens a pull request in your GitHub repository carrying its checks and findings. Your checks, your reviewers and your release process are unchanged and still decide what ships.
    What it does not do. It does not merge and it does not release. Autonomy is off by default and is turned on per population, by you, in writing. Reign Factory is being productized toward commercial availability rather than generally available today. What it is, and what it will not do →
    Shared responsibility

    What we run, what you run.

    Scoped to GitHub Enterprise, and written down before anything is deployed, so the boundary is a document rather than a discovery.

    WhoWhat they hold
    Reign Ops, automated Operate GitHub Enterprise inside your authorization boundary. Enforce your identity provider at the platform edge. Run Actions runners isolated per environment with short-lived OIDC tokens and no long-lived secrets. Stream the audit log to your SIEM. Apply hardening as policy-as-code. Patch the substrate and the runner fleet on a cadence matched to upstream releases.
    Customer authored Your repositories and intellectual property. Code review policy, branch protection and push policy. The catalog of AI coding tools the organization sanctions. Approval of the evaluators authored during the on-ramp, and of new tool integrations and policy exceptions as they are surfaced.
    Operating partner engagement Stand up the initial hardening configuration. Author the first set of evaluators against your GitHub Enterprise surface. Operate the remediation path on what those evaluators find. Lead the periodic posture review with your risk, security and audit functions, and train your teams to author their own evaluators.
    Before the scoping call

    The questions that arrive every time.

    How do we move from GitHub.com to Enterprise Server?
    A scoped readiness assessment sizes it: an inventory of organizations, repositories, Actions workflows and secrets, then a gap analysis against your regulatory surface, then a phased cut-over with the governed posture live on the new substrate from day one. Workflows are not rewritten mid-flight.
    Does Copilot still work?
    Yes. It routes through Reign Gateway at the call layer, which is where the policy applies and where the record is written. You author the catalog of tools the organization sanctions and the boundary enforces it. Your engineers do not change how they work.
    What about Advanced Security?
    Code scanning and branch protection are among the twelve controls applied on day one, as policy-as-code rather than settings. Scanners report their findings into the request; they do not block. You decide what to act on and in what order.
    Which deployment shapes can we have?
    A single-tenant dedicated instance, in your own AWS or Azure cloud account or in infrastructure iTmethods operates. Both are available today and both are single tenant. Google Cloud is planned for 2027. Air-gapped and sovereign are in development. There is no multi-tenant or shared option at any tier.
    What happens to the AI coding tools our engineers already use?
    They keep working, and they route through Reign Gateway at the call layer. You author the catalog of what is sanctioned; the boundary enforces it and records what each call asked for, what applied to it and what came back. Nothing here requires your engineers to change tools.
    Can we see the controls before committing to anything?
    Yes. Five of the twelve are on this page in full, and the hardening sheet carries all twelve with framework mapping and sample policy excerpts. Nothing on this page needs a conversation before you can read it.
    AWS Advanced Tier Services Partner
    AWS Advanced Tier Services Partner and Validated Managed Service Provider. Twenty-one years operating critical infrastructure for regulated enterprises.
    Next step

    Scope your GitHub Enterprise on Reign Ops.

    Tell us where your GitHub runs today, roughly how many organizations and repositories, and what is forcing the question. We will come back with what we would operate and what we would leave alone.