Runner Mods
CircleCI allows customer workloads to be executed behind-the-firewall in their own private network, using only outbound egress communication with CircleCI services. This is ideal for workloads depending on data or systems that must not be exposed to internet.
Circle CI offers ultimate flexibility as these come in both machine and container flavors.