A self-hosted package is software that a customer installs and runs on systems they control, rather than accessing it as a service operated by a central provider. The customer may manage the server, configuration, and deployment, while the package itself can still be licensed or subscribed to.
In cyber security, self-hosting affects where software runs and how defenders can identify and disrupt its use. For example, a phishing kit sold as a self-hosted package may let each customer deploy fake pages on separate infrastructure, instead of relying on one shared service. This can make campaigns less centralized, but does not by itself prove that they are harder to detect or take down. Defenders can monitor suspicious domains and hosting activity, while users should rely on phishing-resistant authentication to reduce the value of stolen passwords.