Semaphore UI Enterprise

Self-hosted automation for business-critical infrastructure

Run Ansible, Terraform, OpenTofu, PowerShell and Python across thousands of servers with high availability, fine-grained access control, the secret managers you already use and an engineering team on call — on infrastructure you control, including air-gapped networks.

  • Proof-of-concept help
  • Custom SLA
  • Invoice and bank transfer

Trusted by teams that run automation in production

#1
Ansible UI for Windows & Linux
14K+
Stars on GitHub
6M+
Pulls on Docker Hub
100K+
Installations
What Enterprise adds

Built for automation the business depends on

Everything in Pro, plus the controls that large and regulated teams need.

Resilience

Keep automation running when a node fails

Run Semaphore UI in active-active or active-passive mode and spread execution across runners in every data center and region.

  • High availability (active-active or active-passive)
  • Kubernetes execution — every task in an isolated pod
  • Multi-instance licensing for production, staging and DR
  • Unlimited users and runners
Governance

Give every team exactly the access it needs

Map identity-provider groups to Semaphore roles, define custom roles and decide who can run which template.

  • Custom roles
  • Role mapping from identity-provider groups
  • Granular task-level permissions
  • Task and activity history for audits
Secrets

Use the secret managers you already trust

Credentials are resolved from your secret store when a task runs, so they never have to be copied into another system.

  • HashiCorp Vault
  • AWS Secrets Manager
  • Azure Key Vault
  • Devolutions Server
Deployment

Runs where your infrastructure lives

Semaphore UI is a single Go binary with Docker images and a Helm chart. Enterprise adds licensing and guidance for the hardest environments.

Kubernetes

Deploy with the official Helm chart, run as non-root and execute each task in an isolated pod.

VMs and bare metal

Install the binary or packages on Linux or Windows, behind your own load balancer and single sign-on.

Air-gapped networks

Offline licensing for environments with no internet access. Mirror images and packages to your internal registry.

Distributed sites

Place runners in remote data centers, stores, plants or customer networks. Only the runner needs to reach the hosts it manages.

Support and services

An engineering team on call, not a ticket queue

Work directly with the people who build Semaphore UI.

Community Pro Enterprise
Channels GitHub and community Email Email, Slack, video calls
Technical questions Best effort Business-hours SLA Response within 12 hours
Emergency (instance down) — — 2h / 4h / 8h response options
Setup, integration and upgrade help — — Included
Feature requests Community-driven Standard review Prioritized review
Agreement — — Custom SLA

Onboarding and architecture review

Guided installation, HA design and a review of your configuration against best practices.

Migration assistance

Hands-on help moving projects, credentials, inventories and schedules from your current tool.

Custom development

Work with the product team on integrations and features that match your automation needs.

Consulting and training

Expert help with complex automation, architecture decisions and getting your team productive.

Migration

Moving from AWX, Ansible Tower, AAP or Rundeck?

Semaphore UI runs your existing playbooks, roles, inventories and scripts straight from Git — there is no proprietary job format to convert. Our team helps you map projects, credentials and schedules, run both systems side by side and switch over project by project.

Plan your migration
  1. 01

    Assess

    Review your current jobs, credentials, schedules and integrations together with our engineers.

  2. 02

    Pilot

    Run a real project in parallel on your own infrastructure with a trial license.

  3. 03

    Switch over

    Move teams project by project, with our help, without a big-bang cutover.

10,000+
Windows servers managed with Semaphore UI
“Semaphore UI made managing our infrastructure of over 10,000 Windows servers remarkably simple, starting with its incredibly easy deployment. The runners have proven to be a reliable and scalable solution for our needs. On top of the great product, the support we've received has been outstanding.”
Sasha K.Senior Systems Engineer, Jack Henry & Associates
Customer story

Savvii Hosting — automation for 600+ managed servers

Replacing n8n with Laravel middleware between HostBill, Semaphore UI, and the CMDB — and what we would do differently on day one.

Toon Van Dooren · CTO · Savvii Hosting
Read the story →
Industries

Built for complex, large-scale infrastructure operations

Retail & Distributed Operations

  • Managing thousands of distributed nodes (stores, terminals, edge systems)
  • Rolling out updates across regions with limited maintenance windows
  • Handling configuration drift at scale

Finance, Insurance & Regulated Enterprises

  • Infrastructure changes under strict regulatory controls (PCI DSS, SOC2, internal audits)
  • Certificate rotation and access management
  • Scheduled, auditable maintenance operations

Manufacturing, Logistics & Warehouses

  • Managing mixed environments (on-prem, edge, legacy systems)
  • OS patching with strict uptime and safety constraints
  • Executing controlled changes during incidents

Cloud & Infrastructure Providers

  • Managing large-scale VM and bare-metal fleets
  • OS patching and lifecycle management
  • Customer-specific changes under SLA

Healthcare & Hospitals

  • Managing large numbers of on-prem and workstation-based systems
  • Enforcing strict access controls and audit requirements
  • Performing scheduled maintenance with minimal downtime

Energy & Utilities

  • Operating critical infrastructure across plants and remote sites
  • Managing changes with strict reliability and recovery requirements
  • Running scheduled maintenance under limited access conditions
How buying works

A clear path from first call to production

  1. 01

    Talk to an engineer

    A short call about your infrastructure, scale and security requirements — with an engineer, not a script.

  2. 02

    Prove it on your infrastructure

    Run a proof of concept with a trial license and hands-on help from our team.

  3. 03

    Get a tailored quote

    An annual subscription sized to your deployment and support needs, paid by invoice and bank transfer.

  4. 04

    Onboard your teams

    Guided installation, configuration review and onboarding for every team that will use Semaphore UI.

Security review

Ready for your security team

Share our security whitepaper and vulnerability SLA with your security and procurement teams, or send us your questionnaire.

Enterprise FAQ

What does Enterprise add on top of Pro?

High availability, Kubernetes execution, custom roles, identity group mapping, granular task-level permissions, AWS Secrets Manager, Azure Key Vault and Devolutions Server integrations, air-gapped and multi-instance licensing — plus onboarding, migration and upgrade help and a custom SLA. See the full comparison.

Can Semaphore UI run in an air-gapped network?

Yes. Semaphore UI is fully self-hosted, and Enterprise includes offline licensing that does not need internet access. Mirror the binaries or container images to your internal registry and run as usual.

How is Enterprise priced?

Enterprise is an annual subscription tailored to your deployment — the number of instances and environments, and the support level you need. Talk to us for a quote.

Can we evaluate Enterprise before buying?

Yes. We provide a trial license and help you run a proof of concept on your own infrastructure, so you can validate HA, identity and secrets integrations with real workloads.

Do we need to rewrite playbooks to migrate from AWX or Ansible Tower?

No. Semaphore UI runs standard Ansible playbooks, roles, collections and inventories from your Git repositories. Migration is mostly about recreating projects, credentials and schedules — and our team helps with that.

Which identity providers do you support?

LDAP and Active Directory, and OpenID Connect providers such as Okta, Microsoft Entra ID, Keycloak and Google. Enterprise adds role mapping from identity-provider groups and custom roles.

How do support and SLAs work?

Enterprise customers reach our team by email, Slack and video calls. Technical questions are answered within 12 hours, and emergency response options are available when an instance is down. Response times are fixed in your SLA. See the support policy.

How do we pay?

Enterprise is billed annually by invoice and bank transfer. If you need procurement documents, a vendor registration or a security questionnaire, tell us during the first call.

Let's talk about your infrastructure

Tell us about your environment, scale and requirements. We'll help you design the rollout, run a proof of concept and estimate pricing.

Prefer to start on your own? Try Pro for 30 days →