Deploy Vigil Guard Enterprise

One command. Full platform. Your infrastructure.

curl -fsSL https://get.vigilguard.ai -o /tmp/install.sh && sudo bash /tmp/install.sh

Minimum System Requirements

OSLinux x86_64
RAM30 GB (minimum)
Disk70 GB free (minimum)
DockerEngine + Compose v2
Ports80, 443 (free)
NetworkInternet access to Docker Hub
cosignRequired for image signature verification

Scaling Profiles

The installer automatically selects the best profile for your hardware. You can override it with --scaling-profile.

ProfileCPURAMDiskDescription
prod-32-balanced16 cores30 GB70 GBMinimum viable deployment
prod-64-balanced24 cores64 GB70 GBRecommended for production
prod-128-balanced32 cores128 GB100 GBAdditional headroom
prod-256-balanced48 cores256 GB150 GBMaximum resource allocation

What Happens

The interactive installer guides you through 8 steps:

1

Preflight Checks

Validates your system - OS, architecture, Docker, available resources, open ports. Fails fast if anything is missing. Requires acceptance of the End User License Agreement (EULA) before proceeding.

2

Hostname

You provide a hostname (e.g. vge.company.com). The installer derives all service URLs automatically:

api.vge.company.com - REST API

app.vge.company.com - Dashboard

3

TLS Certificate

Choose auto for a self-signed certificate, or provide to supply your own PEM cert and key. Both are validated before proceeding.

4

Infrastructure Extraction

The installer pulls a pre-built configuration image and deploys all necessary files to /opt/vigil-guard.

5

Scaling Profile

Detects host CPU, RAM, and disk capacity, then selects the optimal scaling profile for your hardware. Override with --scaling-profile if needed.

6

Secret Generation

All cryptographic secrets are generated locally and never leave your machine. Stored with owner-only permissions.

7

Image Pull & Verification

Docker images are pulled, cryptographically verified, and checked against the pinned digest manifest before deployment.

8

Start & Verify

All services are started and the installer runs automated health checks to confirm the deployment is fully operational.

Supply Chain Security

Every image is cryptographically signed and verified before it runs on your infrastructure. Images are pulled by content digest, not by mutable tags, ensuring you get exactly what was built and tested.

Signature verification is handled by cosign, which must be installed on the target machine. The installer checks for its presence during preflight. Install cosign

After Installation

Dashboard: https://app.vge.company.com
API:       https://api.vge.company.com

Admin credentials:
  Login:    admin@vigil.local
  Password: <generated>

If you chose auto TLS mode, a self-signed certificate was generated during installation. You will need to trust it on your workstation before accessing the dashboard. The installer prints instructions for macOS, Linux, and Windows.

Log in to the dashboard, change the default password, create your first API key, and start protecting your LLM application.

Uninstall anytime:

sudo /opt/vigil-guard/uninstall.sh

7-Day Full Trial Included

Every installation includes a 7-day trial license with full platform functionality. No feature restrictions, no usage limits.

To purchase a license or extend your trial, contact us.