GitHub Enterprise Server

GitHub Enterprise Server
Name	GitHub Enterprise Server
Developer	GitHub, Inc.
Genre	Version control, Collaborative software
License	Proprietary software

Contents

Overview
Features
Deployment and architecture
Security and compliance
Licensing and pricing
See also

GitHub Enterprise Server. It is a self-hosted, on-premises version of the widely used GitHub software development platform, designed for organizations requiring enhanced security, compliance, and administrative control. Developed and maintained by GitHub, Inc., now a subsidiary of Microsoft, it provides the core collaborative features of GitHub.com within a customer's own data center or private cloud infrastructure. This deployment model is particularly critical for enterprises in regulated industries like financial services, healthcare, and government, where data sovereignty and strict security policies are paramount.

Overview

GitHub Enterprise Server delivers the full suite of Git-based version control and collaboration tools found on the public GitHub.com service, but installed and managed on an organization's own servers. This allows development teams to utilize familiar workflows involving repositories, pull requests, and issue tracking while maintaining physical and logical control over their source code and development data. The product is integral to the DevOps toolchain, enabling practices like continuous integration and infrastructure as code behind a corporate firewall. Its architecture is engineered to support large-scale enterprises, offering high availability and performance for thousands of developers.

Features

The platform includes the complete feature set of GitHub.com, such as GitHub Actions for automation and GitHub Packages for artifact management, all operable in an isolated environment. It supports advanced code review tools, project management boards, and extensive API support for integration with other enterprise systems like Jenkins, Jira, and Splunk. Administrative features are robust, providing tools for user management via SAML or LDAP, detailed audit logging, and policy enforcement for repository creation and access. Unique to the server edition are capabilities for geographic replication across data centers and sophisticated backup and restore utilities.

Deployment and architecture

Deployment typically occurs on an organization's existing virtual machine infrastructure, such as VMware, Hyper-V, or AWS EC2, with support for Kubernetes-based installations via the GitHub Advanced Security offering. The system is distributed as a pre-configured virtual appliance or Docker image, simplifying installation. Its architecture is designed for scalability, often deployed in a high-availability configuration with multiple nodes to ensure resilience. Integration with enterprise authentication systems like Active Directory and network services such as load balancers and proxies is a standard requirement for production environments.

Security and compliance

Security is a foundational pillar, with the product offering features like mandatory two-factor authentication, TLS encryption for data in transit, and encryption at rest. It includes GitHub Advanced Security tools, such as secret scanning to detect credentials and code scanning for vulnerability detection, which are critical for adhering to standards like SOC 2, ISO 27001, and the HIPAA. Organizations can enforce granular access controls, maintain comprehensive audit logs for compliance with regulations like the GDPR and the Sarbanes-Oxley Act, and perform security updates on their own schedule.

Licensing and pricing

Licensing is based on a subscription model, typically priced per user (often per Active Directory seat or named user) and billed annually. Pricing tiers are structured to scale with the size of the organization and the desired feature set, including add-ons like GitHub Advanced Security. The license includes access to software updates, technical support, and documentation. This model contrasts with the public GitHub.com, which offers free tiers for open-source projects and paid plans for private teams, but does not provide the on-premises deployment option.