Category: Featured
On-Premise ALM Tools: What Defense Contractors Need to Know
If you’re managing software development for defense or aerospace programs, you already know the cloud isn’t always an option. Air-gapped networks, classified programs, ITAR-controlled data, compartmentalized projects—these realities make on-premise Application Lifecycle Management (ALM) tools not just preferable, but mandatory.
And then Atlassian ended Server licenses.
Suddenly, teams that had been running Jira and Confluence on-prem for years were forced to evaluate alternatives. Some migrated to Atlassian’s Data Center (at significantly higher cost). Others moved to the cloud and dealt with the compliance headaches. Many started looking for something else entirely.
If you’re in that third group—or if you’re starting fresh and need an ALM solution that works in secure environments—here’s what to look for.
The On-Premise Reality in Defense
“On-premise” in defense contracting means something different than it does in commercial IT. You’re not just avoiding subscription fees or keeping data closer to home. You’re dealing with:
Air-gapped networks where systems have zero internet connectivity—not restricted connectivity, zero. Your ALM tool needs to install, run, update, and function completely offline.
Classified programs that require physical and logical separation. One project can’t share infrastructure with another, even within the same organization.
Government cloud environments like AWS GovCloud or Azure Government, where you need on-prem-style control but with cloud infrastructure.
Compliance frameworks like ITAR, CMMC, and NIST 800-171 that dictate how data is handled, stored, and accessed.
Your ALM tool needs to support all of these scenarios—not as edge cases, but as primary use cases.
What to Look For
Installation That Actually Works Offline
Some vendors claim “on-premise support” but their installer phones home for license validation. Or the application checks for updates on startup. Or certain features require cloud connectivity.
For air-gapped environments, you need:
- Offline installation with no network dependencies
- No license server requiring internet access
- All features functional without connectivity
- Updates delivered as downloadable packages you can transfer via approved media
Docker and Podman-based installations have become the gold standard here. They package everything needed into containers that can be transferred to air-gapped systems and deployed consistently.
As one engineer at a major defense contractor put it: “GForge’s air-gapped installs have made upgrading all our servers so much easier.”
Multi-Instance Architecture
Here’s a scenario that’s common in defense work:
You have unclassified projects, Secret projects, and Top Secret projects. They can’t share infrastructure. Each classification level—and sometimes each program—needs its own instance of your ALM tool.
This creates two challenges:
Procurement overhead. If spinning up a new instance requires a new purchase order, you’re adding weeks or months to program timelines. When a new classified effort kicks off, you need infrastructure ready, not stuck in procurement.
Project mobility. Projects change classification. An R&D effort that starts unclassified may become classified as it matures. You need the ability to export a project from one instance and import it into another without losing history, attachments, or traceability.
Look for licensing models that support unlimited instances (enterprise licensing) and robust export/import capabilities that preserve full project history.
CI/CD That Doesn’t Break the Budget
Continuous Integration and Continuous Deployment are standard practice in modern software development. But in air-gapped environments, your CI/CD infrastructure lives on the same isolated network as your source code.
This is where some vendors’ pricing models fall apart.
GitLab, for example, charges per CI/CD minute on their SaaS offering—and their self-managed licensing at scale becomes cost-prohibitive for organizations running multiple instances. When you need CI/CD across several classified networks, each with their own GitLab instance, costs multiply fast.
An alternative approach: integrate your ALM tool with Jenkins. Jenkins is open source, runs anywhere, and doesn’t charge per minute or per pipeline. You can point any number of Jenkins instances at your projects without additional licensing costs.
Upgrades Without Downtime or Drama
Upgrading software on an air-gapped network is painful. You can’t just click “update.” You’re transferring packages via approved media, testing in isolated environments, and coordinating maintenance windows across programs.
The last thing you need is an upgrade process that requires extensive manual configuration, database migrations with downtime, or—worst case—a failed upgrade that leaves you restoring from backup.
Container-based deployments (Docker/Podman) simplify this significantly. The upgrade process becomes: pull the new container image, stop the old container, start the new one. If something goes wrong, you roll back to the previous image.
Questions to Ask Vendors
When evaluating on-premise ALM tools for defense work, get specific answers to these questions:
- Can it install and run with zero internet connectivity? Not “limited connectivity”—zero. Get them to walk you through the installation process for an air-gapped server.
- What’s the licensing model for multiple instances? Per-instance licensing adds up fast. Look for enterprise agreements that allow unlimited instances.
- How do projects move between instances? Ask for a demo of export/import. Does it preserve full history? Attachments? Custom fields? User associations?
- What does an upgrade look like on an air-gapped server? Ask to see the actual process. How long does it take? What’s the rollback procedure?
- What are the CI/CD costs at our scale? Model out your actual usage across all instances and networks. Some vendors’ pricing looks reasonable for one instance but becomes untenable at scale.
- What compliance frameworks do your customers use this for? The vendor doesn’t need to be “certified compliant”—but they should have customers successfully using the tool in ITAR, CMMC, or similar environments.
Getting Started
If you’re evaluating options, GForge is worth a look. It’s an all-in-one ALM platform (project management, source control, wikis, CI/CD integration) built for exactly these scenarios:
- Docker/Podman installation that works fully offline
- Enterprise licensing for unlimited instances
- Full project export/import with complete history
- Jenkins integration for CI/CD without per-minute costs
- Customers in defense and aerospace running it on air-gapped networks today
You can download it and test on your own infrastructure, or talk to an engineer about your specific requirements.
GForge for Defense & Aerospace | Download GForge | Talk to an Engineer
GForge v18.1 Released!
Just a little over a month ago we ushered a completely revamped GForge platform dubbed GForgeNext and today we are happy to announce the release of v18.1. Please remember we have changed our version numbering to reflect the year and the number of the release. Since this is the second release of 2018 this version coincides to v18.1 which should help customers quickly know how many versions behind they may be.
Getting Started with GForgeNext
The biggest change in 18.1 is the addition of SVN commit hooks. This means that all customers using both Git and SVN can safely upgrade to this version. For our remaining customers still using CVS we will be adding that support in v19.0 due out the first quarter of next year.
- The v18.1 ChangeLog will help you understand the changes you can expect.
- The GForgeNext FAQ will answer most of your questions but don’t hesitate to send additional questions.
- We are still encouraging customers to reach out to us for a free consultation on the planning and upgrade process. If we don’t hear form you we will be reaching out to all our customers over the coming week.
GForgeNext Released!
Yes, it’s been a long time coming and nobody is happier than we are to formally announce the release of GForgeNext!
For those new to GForge, GForgeNext gives you all the tools you need to build and collaborate on software. In keeping with our motto of making collaboration Simple, Comprehensive and Elegant – GForgeNext leverages Docker so it installs in seconds, includes all the tools you need to build better software and it all comes with a user experience you will enjoy! For those not interested in running their own instance of GForge, you can opt for our new SaaS offering!
Getting Started with GForgeNext
For existing customers this release is significant because GForgeNext is as different as it is similar to GForge AS. You still get all the features of GForge AS but everything has been rethought and redesigned. In order to upgrade to GForgeNext, existing customers will have to upgrade to GForge AS v6.4.4 and then the upgrade will handle the rest! To help we have put together a few resources:
- The GForgeNet ChangeLog will help you understand the changes you can expect.
- The GForgeNext FAQ will answer most of your questions but don’t hesitate to send additional questions.
- Beginning immediately we are encouraging customers to reach out to us for a free consultation on the planning and upgrade process. If we don’t hear form you we will be reaching out to all our customers over the coming week.
The Same Old, Brand-New Argument: All-In-One or Best-Of-Breed?
Introduction
For at least the past twenty years, IT folks have been faced with the same basic problem when choosing whether and which products to adopt. The term “Best of Breed” is commonly used to talk about products that offer high quality in a narrow set of features. “All in One” products, on the other hand, combine features that may cross business process or technical boundaries.
Different vendors have very different views on whether customers need a bunch of features integrated in a single product, or whether they would rather manage a set for more focused products that they (or someone else) can stitch together.
What’s the right way to go? The answer is, of course, “it depends” — and while this may be accurate, it’s not very helpful without some practical criteria to apply.
The Trade-Offs
Learn To Let Go
First things first — as a customer, buying someone else’s product means buying into their approach, their decisions, and their limitations. You’re almost certainly not going to get *exactly* what you want. Then again, you won’t be building and maintaining your own code, spending money on adding features, and your development staff can be off chasing your *real* business goals.
Look at the Big Picture
Another big trade-off involves the *rest* of your business technology. How does your current need fit in with the rest of your business systems? If you can cover more business requirements with one product, it means fewer integration points. If your requirements are very complex or specific, it might be worth the extra dependency to go after a best-of-breed tool in a given area.
Watch the Uptime
Lastly, consider outages and support. It’s inevitable that you’ll depend on your vendor(s) to come through for you when something goes wrong. Make sure you have a well-defined level of service with each vendor.
Outages can and will occur, and they affect your business continuity. Having a set of smaller, independent services from different vendors might seem like a good hedge against downtime, but in reality more moving parts *always* means a higher chance of failure. If four out of five systems are up, it doesn’t mean you have 80% functionality — interdependency usually drives that number down pretty quickly as you add components.
What’s Right for You?
With those trade-offs in mind, let’s go through a few questions that you can apply to your own situation, to help identify where you might find the most value:
1. How Big (Small) Is Your Scope?
If your needs are pretty narrow (e.g., file storage, web analytics, payment processing), then it’s likely to be well-covered by a best-in-breed solution. If you need lots of features, or a lot of complexity within them (think workflow, document management, billing or accounting), then an integrated option will offer less difficulty to get up and running, even if it has some limitations you don’t love.
2. How Much DIY Can You Handle?
This one is pretty simple — the more pieces you add to your quilt, the more stitching you’ll need to do. For example, you’ll need to keep your list of customers updated between CRM and project management, or maybe get build status in your work chat.
Nowadays, it’s very typical for applications to offer an API right out of the box. It’s also pretty common to have some integrations baked into tools — fill in a field or two, check the “Enabled” box and it’s connected. But the ease of initial adoption can misrepresent the ongoing costs to keep things the way you want them. Here are some examples:
- Documented APIs are typically stable and reliable, but your custom integration with an API can become fragile over time, as your needs become more complex.
- Built-in integrations provided between vendors (especially “web hook” type integrations) are always vulnerable to compatibility issues between the vendors, as they add (and retire) features over time.
- Troubleshooting problems between multiple vendors is not for the faint-of-heart — you will often find yourself stuck in the middle, trying to prove that you have a problem they can solve.
If you’re a completely bootstrapped startup, where you have more time than money, it might make sense to invest that time into getting the tools you want tied together. As your organization grows, however, the balance between time and money often changes, and you’ll need to re-evaluate some of those early decisions.
3. Who Are You Getting Involved With?
Regardless of which way you go, you’ll want to know some things about your vendor(s) before you sign on. Here are a few starters:
- First and foremost, are they going to disappear one random evening, with all your data?
- How long have they been around?
- How do they deal with customers during the sales cycle? The support cycle?
- Do they solicit/accept/ignore requests from their customer base? Are they responsive to requests?
- What levels of support (free or paid) are available? Do they promise a specific level of service?
- Do you know anyone else who is a customer? What do they think?
Depending on your size and level of formality, these questions may become much more important. Newer, smaller, bootstrapped companies may care a lot more about what they can get now, and less about who’s answering the phone at 3AM. Organizations that have to answer to customers, boards of directors, investors or regulatory authorities might have an entirely different view. Uptime becomes much more important once you have paying customers, and people relying on your services.
4. What Will You Need Next Year? In Three Years?
If you’re a new company, patronizing another new company can seem like a great idea. Finding a focused vendor to partner and grow with can be a great fringe benefit — unless they go out of business or pivot away from what you need. Regardless of how good a relationship is at the beginning, it’s important to keep in mind how you’ll get out if and when it’s time to move on.
Some services are easier to change than others, like payment processing or CDN — you can even use two vendors concurrently and make a soft switchover. For other tools, like bug tracking, CRM, or internal tooling (e.g., database, message queue, web platform), changing vendors can take time, attention and planning away from your more strategic goals. All of those distractions cost opportunities, sales, and revenue.
But that’s not even the worst-case scenario. Instead, many teams will continue using tools that don’t support them strategically, struggling along with more and more string and duct tape around a core that is no longer suited to them. This is a quiet, passive killer of your team’s momentum and ability to innovate — especially if certain tools or systems become off-limits for discussions about improvement.
In general, I try to buy software and services the way that parents buy clothes for their kids. Sure, they’re a little too big at first, but if you choose wisely, you’ll find something you can grow into. Maybe even something you never outgrow.
If you’re looking for a task/code/team collaboration tool that you’ll never outgrow, come check out GForge: https://next.gforge.com
The GForge Group Enters Public/Private Partnership with Rose-Hulman
We are happy to announce The GForge Group entered their first-ever private/public partnership with Rose-Hulman Institute of Technology. Specifically, an agreement has been reached to establish a special mentorship program with Computer Science and Software Engineering students at Rose-Hulman’s campus in Terre Haute, Ind.
During the school year, Rose-Hulman students will be divided into teams of four or five. Each group will be tasked with implementing a new feature in The GForge Group’s product: GForge Advanced Server. The program is designed to provide undergraduate students with real-world engineering experience.
According to Rose-Hulman Assistant Professor Chandan Rupakheti, the mentorship program, developed jointly by GForge Group President Tony Bibbs, is an incredible opportunity for software engineering students who wish to immerse themselves in “real-world” problems.
“This partnership opens up a new avenue of collaboration between academia and industry. We are extremely excited to launch this special 10-week mentorship program. It has been carefully designed for students to build software components that potentially can be rolled into the product line of an industry leader like GForge,” stated Rupakheti.
Tony Bibbs, GForge Group’s top executive, reinforced the importance of providing hands-on experience to Rose-Hulman’s students. “Every year, the job market competition increases and it’s critical for students to gain in-depth experience in product development. For example, they need to apply agile software principles, be the best in writing and testing source code and performing peer code reviews.”
Bibbs went on to say, “Through this mentorship program, the students will learn how to effectively collaborate using tools like the GForge Advanced Server. After all, we know poor project management and collaboration result in software projects that fail.”