Announcing Forge Enterprise: SSO, audit logs, and dedicated infrastructure

Over the past two quarters we worked with a handful of larger engineering organizations to bring Forge into environments with real compliance and infrastructure requirements — centralized identity, immutable audit trails, and in some cases full network isolation. Today we're making that work generally available as Forge Enterprise.

What's included

Forge Enterprise adds SSO and SCIM provisioning through SAML or OIDC, so access follows your identity provider instead of a separate user list to keep in sync. Every action across the workspace — from a review comment to a production deployment — now writes to an immutable audit log that can be streamed to your own SIEM, rather than living only inside Forge.

For teams that need it, we also now offer dedicated infrastructure: a workspace's AI review, indexing, and CI/CD execution run on infrastructure isolated from the shared multi-tenant platform, with the option of a private networking configuration for organizations that can't allow traffic to leave their VPC.

Why now

The teams asking for this weren't asking because the shared platform was insufficient technically — they were asking because their security and compliance review processes have requirements that a shared environment structurally can't satisfy, regardless of how well it's built. Rather than compromise the product for every team to satisfy the strictest few, we built Enterprise as its own deployment tier.

Getting started

Forge Enterprise is available today. If your team is evaluating Forge and has SSO, audit, or infrastructure isolation requirements, reach out through the pricing page and we'll walk through what a deployment looks like for your environment.