If you are distributing an AGPL software as a derivative work, you must also distribute the source. You can make as many modifications for internal use and not distribute them, if you're not making a derivative work.