Panther Deployment Types

Choose between Panther SaaS or CPaaS

Overview

Panther currently offers two deployment models: Software as a Service (SaaS) and Cloud Premises as a Service (CPaaS).

The primary difference between SaaS and CPaaS deployments is the owner of the AWS account in which your Panther instance is deployed. With SaaS, the AWS account is owned by Panther; in CPaaS, it is owned by your organization. In both SaaS and CPaaS deployments, Panther manages the instance, including performing version upgrades.

Panther previously offered a Self-Hosted deployment model, but it is no longer available to new customers. If you have additional questions about either SaaS, CPaaS, or the deployment type of your Panther instance, reach out to your Panther support team.

SaaS

In the SaaS deployment model, Panther owns and manages the AWS account in which your Panther instance is deployed.

In the SaaS model, you can use either a Panther-managed or customer-configured Snowflake instance.

CPaaS

In the CPaaS deployment model, your organization owns the AWS account in which your Panther instance is deployed, but Panther staff manages initial deployments and upgrades. Panther performs this work by assuming an IAM role called PantherDeploymentRole, after you have created it using a CloudFormation template provided by Panther. Learn how to work with Panther to set up CPaaS in Preparing for Initial CPaaS Deployment.

When a CPaaS instance is deployed, Panther self-monitoring is enabled, meaning your Panther instance will automatically ingest audit logs produced by your AWS account. This allows you to monitor actions taken by the PantherDeploymentRole (as well as any other IAM role).

Panther may use third-party software in your Panther instance to monitor application performance and collect user and product analytics. For more information, reach out to your Panther support team.

In the CPaaS model, you can use either a Panther-managed or customer-configured Snowflake instance.

Self-Hosted (Legacy)

Panther no longer offers the Self-Hosted deployment model. If you are existing Self-Hosted customer, see Self-Hosted Deployments (Legacy) for more information.