# Hybrid and Disconnected Modes

Model Scanner supports two primary deployment modes to give you flexibility based on your network security requirements and how much data you want to share with HiddenLayer.

## Deployment Modes

The Model Scanner CLI container can be deployed in either Hybrid Mode or Disconnected Mode. The architecture for these modes are very similar, except where the results are stored.

### Hybrid Mode

When Model Scanner CLI is deployed in Hybrid mode, metadata per scan will be sent back to HiddenLayer to power the UI and provide visualizations for users to review.

Model Scanner CLI Hybrid Mode
### Disconnected Mode

In the fully disconnected mode, all components including scanning and storage are hosted and operated entirely within your environment. There is no communication with the HiddenLayer Console or external APIs.

- Nothing leaves your environment, including scan results.
- The UI is not included in this mode; you'll interact with results directly from the terminal and logs.
- Results are stored locally.


Model Scanner CLI Disconnected Mode
## Container Lifecycle

Model Scanner CLI is a synchronous executable:

- Users invoke Model Scanner CLI by running the Docker image with command-line arguments that describe the model(s) to be scanned, and the location where scan results and scanner logs should be rendered.
- Model Scanner CLI executes the scan.
- The Docker container exits.