CAPABILITIES
What it provides
- Project membership with viewer, member, and owner roles.
- Certificate-based agent enrollment and gRPC mutual TLS.
- Configuration bundles delivered to connected WAF agents.
- Audit records for security-relevant administrative changes.
DEPLOYMENT WORKFLOW
How to use it
- 01
Deploy the control plane and initialize an administrator account.
- 02
Create a project, assign appropriate membership, and provision agent credentials.
- 03
Connect agents, verify their status, and apply project policies from the dashboard.
CONFIGURATION & OPERATION
Where it fits in your setup
System administrator access is separate from project roles. Provision credentials through the Credentials page and protect private keys. The certificate fingerprint identifies the agent’s project; provider Auth-Keys are separate credentials.
COVERAGE & LIMITS
What to account for
Agent connectivity and version compatibility affect update delivery. Self-hosting also means operating backups, upgrades, database retention, and access controls. Different data providers may require their own credentials and outbound connectivity.