// Platform
A lightweight service that runs on your servers and handles deployment execution — without opening a single inbound port. Agents work with Jaws Deploy Cloud and Jaws Deploy Stack.
Agents are the bridge between Jaws Deploy and the machines where deployment work actually runs. They receive deployment tasks from the Jaws Deploy server, execute steps against local targets, stream logs back in real time, and report completion status — all without requiring the Jaws Deploy server to reach directly into your infrastructure.
The security model is the most important thing to understand about agents. The agent initiates an outbound connection to the Jaws Deploy server using a secure, persistent WebSocket channel — your servers do not need to accept any inbound connections. No firewall rules to open. No VPN tunnels to maintain. No exposed ports.
This means the agent model works naturally with corporate security policies, DMZ layouts, on-premises networks, and private cloud environments where inbound access to production servers is prohibited or impractical.
The Jaws Deploy interface provides a ready-to-run install script for each target. Run it on the target machine/deployment target, the Agent registers itself and sends a handshake, and an administrator approves the connection. From that point the machine is available as a deployment target.
// Next step