[debarshri]

More modern day SaaS first tools do not have on-prem option instead they have an on-prem agent model that executes tasks and responds back to the main SaaS platform.

[nerdchum]

When I worked at a big well known tech company their prod environment of 100,000 or so servers didn't have access to the internet.

[debarshri]

Resource often have access to outbound internet via proxies. You need it for updates. Super big org often self host solutions

[dx034]

Can you name some examples? I haven't come across that yet.

[debarshri]

Airplane [1] with is similar platform like this. In security space there is Wiz [2]. At Adaptive [3] that is in access management platform, where I work. We do the same too. Agent communicating over established tunnel works without any org configuration changes.

[1] https://airplane.dev

[2] https://wiz.io

[3] https://adaptive.live