Air-Gapped Mode
Operate PhantomYerra with zero external network calls: all AI processing via local Ollama, no telemetry, no cloud sync, maximum data isolation.
Prerequisites
- Ollama installed locally with at least one model pulled
- All scan tool binaries pre-downloaded (no internet required after setup)
- CVE database pre-synced (Settings → CVE → Sync Now) while connected
- Vulnerability scan templates pre-downloaded while connected
- PhantomYerra license validated (if using licensed mode) while connected
-
1
Pre-Download Everything While Connected
Before entering the air-gapped environment, while still connected to the internet:
# Pull Ollama models (contact support@phantomyerra.com for recommended model names) ollama pull [large-model] # best quality (needs 64GB RAM) ollama pull [small-model] # lighter option (needs 16GB RAM) # Update all scan tools and templates # PhantomYerra → Settings → Tools → Update All # Sync CVE database # PhantomYerra → Settings → CVE → Sync Now # Update all components via Settings → Tools → Update All before entering air-gapped mode. -
2
Enable Air-Gapped Mode
Go to Settings → Privacy → Air-Gapped Mode. Toggle Enable Air-Gapped Mode to ON. This sets the following configuration:
privacy_mode : air_gapped use_local_model : true ollama_endpoint : http://localhost:11434 local_model : [auto-selected by PhantomYerra] anonymize_ai_calls : true (enforced - cannot disable) send_domains_to_ai : false (enforced) send_ips_to_ai : false (enforced) send_company_names_to_ai : false (enforced) block_external_ai_calls : true (hard block at HTTP layer) telemetry_enabled : false auto_update_enabled : false license_check_interval : never (offline mode) -
3
Configure Ollama as Primary AI Provider
In Settings → AI Configuration → Provider Priority, drag Local Ollama to Position 1. All other providers are automatically disabled in Air-Gapped Mode regardless of this setting.
-
4
Disconnect from Network
You can now physically disconnect from the network or disable the network adapter. PhantomYerra will operate fully offline. The status bar shows 🔒 Air-Gapped Mode Active in red when network is disconnected.
Common Issues
Ensure the Ollama service is running: ollama serve or check the system tray icon. Verify the model is loaded: ollama list - the model must show as available. Confirm the endpoint in Settings → AI Configuration → Local Ollama is http://localhost:11434. On Windows, Ollama may need to be started manually from the Start Menu.
Sync the CVE database before entering the air-gapped environment: Settings → CVE → Sync Now. For ongoing air-gapped engagements, periodically sync via a controlled connection or export the CVE database from Settings → CVE → Export Database and transfer it to the air-gapped machine via approved media. PhantomYerra's CVE sync downloads the full NVD JSON feed which can be transferred as a single file.
Run Settings → Tools → Update All while connected to the internet before entering the air-gapped environment. Scan templates are stored in the PhantomYerra tools directory (see Settings → Tools → Template Path for the exact location on your system) and can be copied to an air-gapped machine via approved media transfer.