--- title: Frequently Asked Questions | Wartiva description: Answers about Wartiva: how zero-load queries work, offline endpoints, IoT discovery, supported platforms, geolocation, CIS Benchmarks, data hosting, and encryption. url: https://wartiva.com/faq.html updated: 2026-10-07 --- FAQ # Frequently asked questions Straight answers about what Wartiva does, how it works, and how it protects your data. ## About Wartiva ### What is Wartiva? Wartiva is an AI endpoint management platform. It mirrors compressed endpoint state to the cloud and organizes your environment into a 4D security graph of relationships, time, and physical location, so people and AI agents get answers in milliseconds without adding load to your endpoints. ### Who is Wartiva for? CIOs, CISOs, and their IT and security teams at regulated, distributed organizations, including [financial services](https://wartiva.com/solutions/financial-services.html), [healthcare](https://wartiva.com/solutions/healthcare.html), [government](https://wartiva.com/solutions/government.html), legal, technology, retail, manufacturing, energy, education, and insurance. ### Can I buy Wartiva today? Wartiva is in early access. We onboard a limited number of organizations at a time to protect platform performance and give every team dedicated onboarding support. [Request early access](https://wartiva.com/early-access.html) to join the priority list. ### Who founded Wartiva? Wartiva was founded by David Wartell, CTO/CIO of an NYSE-listed fintech, who built Wartiva to be the endpoint management platform he always wished he had. Meet the [founding team](https://wartiva.com/team.html). ### Where is Wartiva based? Wartiva is based in Austin, Texas, at 1501 S. MoPac Expressway, Suite 220, Austin, TX 78746. Call us at [512-377-9410](tel:+15123779410), or [request early access](https://wartiva.com/early-access.html). ## How it works ### Does Wartiva slow down endpoints? No. Wartiva computes compressed deltas of critical endpoint sensor data and mirrors them to the cloud, so searches, rules, and AI questions run there instead of on your users' machines. Its OS integrations are written in Go + C/Zig against efficient native APIs. [How zero-load queries work](https://wartiva.com/platform/endpoint-performance.html). ### Is Wartiva agentless? No. Wartiva installs one small native package on each endpoint, then keeps the work off it. Searches, rules, and AI questions run on Wartiva's cloud mirror, never on the endpoint. Local network sensor work is offloaded to the cloud through Wartiva's proprietary Secure Application Encapsulation (SAE), so Wartiva sees into each endpoint's network without running that work on the endpoint. And the endpoint code is performance-aware: written in Go + C/Zig against native OS APIs, with no WMI, shell commands, or diagnostic utilities. IoT and OT devices are discovered without installing anything on them. [See how Wartiva protects endpoint performance](https://wartiva.com/platform/endpoint-performance.html). ### How do I install Wartiva, and how much does it use? Wartiva installs from an EXE on MS Windows (graphical, or command line for automated installs), a macOS package on Apple macOS (graphical, or command line for automated installs), and APT and RPM repositories on Linux. The binary is about 25–60 MB depending on platform and architecture, and it typically uses 1–2% of one CPU core and 30–50 MB of RAM. [See installation and footprint details](https://wartiva.com/requirements.html#install). ### Does Wartiva work alongside my endpoint detection and response (EDR) tool? Yes. Wartiva coexists with EDR tools. You may need to add an exclusion in your EDR for Wartiva's network activity. ### How is Wartiva different from “Titanium” (aka Tanium)? Wartiva answers from its cloud mirror, so query volume, including queries from AI agents, never lands on your endpoints. “Titanium’s” linear chain architecture, by contrast, queries endpoints peer-to-peer and adds load to every endpoint with every query. [More on zero-load queries](https://wartiva.com/platform/endpoint-performance.html). ### Can I get answers about endpoints that are offline? Yes. Wartiva keeps the last known state of every endpoint in the cloud, so you can query it and apply new rules immediately, without waiting for the endpoint to come back online. ### Do I need to deploy appliances, sensors, or virtual machines? No. Install Wartiva on your endpoints and you're covered wherever they go. Network sensors run in the cloud and reach each endpoint's local network over a single mutual TLS (mTLS) connection the endpoint initiates (Secure Application Encapsulation, or SAE). ### How does Wartiva find IoT and unmanaged devices? Wartiva finds them passively, without agents or credentials on those devices. It combines DHCP fingerprints, multicast DNS advertisements, TCP/IP stack characteristics, open ports, and exposed services, and an AI model weighs the signals to classify each device. [More on network discovery](https://wartiva.com/platform/network-discovery.html). ### How accurate is Wartiva's geolocation? Wartiva automatically identifies the location and physical address of your assets, typically within 100 meters, and keeps a full location history. [More on asset geolocation](https://wartiva.com/platform/asset-geolocation.html). ### How do I write security policies? Wartiva rules are written in Rego, the open policy language of Open Policy Agent (OPA), or as plain-language prompts that AI evaluates. Wartiva also ships a catalog of policies mapped to the CIS Benchmarks, and an AI policy assistant drafts and tailors rules for you. [More on policy as code](https://wartiva.com/platform/policy-as-code.html). ### Which CIS Benchmarks does Wartiva check? Wartiva checks the CIS Benchmarks for Apple macOS 26 Tahoe, Microsoft Windows 11 Stand-alone, and Ubuntu Linux 24.04 LTS, plus Wartiva Security Controls for risks the benchmarks don't cover. Each check is also mapped to the CIS Controls v8, NIST SP 800-53 Rev. 5, NIST SP 800-171 Rev. 2, CMMC 2.0, and PCI DSS v4.0.1 requirements it provides evidence for. [Browse every policy rule](https://wartiva.com/policy-rules.html). ### Does Wartiva detect prohibited hardware? Yes. Wartiva Security Controls flag equipment from vendors prohibited under Section 889 of the FY2019 National Defense Authorization Act (NDAA), such as Huawei, ZTE, Hikvision, Dahua, and Hytera, and devices from other untrusted vendors. [See the device exposure controls](https://wartiva.com/policy-rules/wartiva/device-exposure.html). ### Does Wartiva have an API? Yes. A single, strongly typed GraphQL API exposes your entire security graph, the same API that powers the Wartiva product. You can traverse relationships and query across time in one request. [More on the GraphQL API](https://wartiva.com/platform/graphql-api.html). ### Which operating systems does Wartiva support? Wartiva runs on MS Windows 10 and 11, Windows Server 2016 through 2025, Apple macOS 11 through macOS 27, and Linux, including Amazon Linux, CentOS, Debian, Fedora, Red Hat Enterprise Linux, Ubuntu, and Ubuntu Server, on x86_64 and arm64. Any Linux built on glibc 2.17 or newer is supported. [See full system requirements](https://wartiva.com/requirements.html). ## Security, privacy, and compliance ### Which AI models does Wartiva use, and does it train on my data? Wartiva uses models from OpenAI and Anthropic. Wartiva doesn't train models on customer data. ### How long does Wartiva keep my data? Wartiva keeps data for the retention period in your service plan, and no data is retained past that period. ### Where is my data hosted? Wartiva's platform is hosted on AWS, with hosting locations including the US, the EU, and the UK. ### How is my data encrypted? Customer Data is encrypted in transit with TLS 1.2 or later and at rest with AES-256. Keys are managed in AWS Key Management Service (KMS), rotated periodically, and stored only in the region of your Wartiva tenant. [Read the Security Addendum](https://wartiva.com/legal/sec-addendum.html). ### Does Wartiva support single sign-on? Yes. Wartiva supports SAML 2.0–compliant SSO applications, so you manage authentication for your own Wartiva tenant. ### Is Wartiva penetration tested? Yes. Independent third parties penetration-test the service at least annually and upon major changes, and summary results are available to customers on request. ### Do you sign a Data Processing Agreement? Yes. Our [Data Processing Agreement](https://wartiva.com/legal/dpa.html) covers how Wartiva processes personal data on your behalf, including GDPR and UK GDPR terms. ### What uptime does Wartiva commit to? Wartiva commits to a 99% Monthly Uptime Percentage, with service credits if we miss it. [Read the Service and Support Levels Agreement](https://wartiva.com/legal/sla.html). ### Do you work with government customers? Yes. Our [U.S. Government Customer Addendum](https://wartiva.com/legal/us-gov.html) covers federal, state, and local government customers. ## See your environment the way it really exists Wartiva is in early access. Request your spot and talk to the team that built the endpoint platform they always wished they had. [Request Early Access](https://wartiva.com/early-access.html) --- Wartiva is in early access. Request access: https://wartiva.com/early-access.html All pages: https://wartiva.com/llms.txt