Deploy

Runs where your agents run.

Azure SaaS, hybrid, or fully on-prem on any Kubernetes. A whole governed site runs in your building on one small machine at 20–25 W.

Deployment shapes

Three shapes, one record.

The badge, the door and the record work the same way in each shape. What changes is where they run.

cloud

Azure SaaS

Subscribe on the Azure Marketplace and sign in through Entra ID. Nothing to install in your environment.

  • Transactable on Azure Marketplace
  • Entra ID native
  • Billed through Azure
hybrid

Hybrid

Your agents and data stay in your environment. Ares governs them where they already run.

  • Agents stay where they are
  • Your directory, your network
  • Same record as SaaS
on-prem

On-prem and disconnected

Ares in your building on any Kubernetes, with or without a connection out. Sovereign by construction.

  • 20–25 W for a whole site
  • Eight networks on one machine
  • Runs disconnected
Bring your own agent

Keep your agents. Add the badge, the door and the record.

Ares does not ask you to rewrite anything. Connect the agents you have and they are governed from the next run.

Your code stays yours

No framework to adopt and nothing to fork. Ares governs the agent from outside it.

A2A, MCP or the SDK

Connect over the protocol your agent already speaks.

A badge per job

Each run gets a narrow, time-limited permission. Anything outside it is refused at the door.

Every step on the record

Allowed, refused, redacted or sent to a human for review. All of it written down.

Compare

Which shape fits.

Azure SaaSHybridOn-prem
Where your agents runAzure or anywhereYour environmentYour building
Where the record is keptYour Azure tenant regionYour environmentYour building
IdentityEntra IDEntra IDYour directory
Runs disconnectedNoNoYes
Hardware you provideNoneYour KubernetesOne small machine, 20–25 W
Bring your own agentYesYesYes
How you buyAzure MarketplaceAzure MarketplaceTalk to us
Next step

Tell us where your agents run.

We will tell you which shape fits, and what it takes to get the first workflow governed.