[jazzyjackson]

I’m on Team Airgap but I would expect that bringing on dedicated devops staff to maintain internal systems would blow away any cost savings and leave you at higher risk for downtime if the one Linux Wizard you hired to set it all up leaves for greener pastures. At least the SaaSs have a higher bus factor.

And then you have your security risks of duplicating your access control. So you mirror all your employees emails, now you have to make sure only administrators have read access and avoid ever exposing that system to the internet and prevent exfil.

I’m thinking of how to do this for a friends company and the amount of stuff that a SaaS takes care of is staggering. Right now I’m stuck on learning to be my own root CA to distribute client certificates for mTLS so I can avoid relying on third party SSO/auth.