Use the agent when
- Production databases are in a private VPC or on-prem
- Security policy says row data must not leave your network during sync
- You cannot open inbound DB ports to a SaaS ETL vendor
- You still want catalog, quality, and the same Zwiron UI
Skip the agent when
- Sources like Snowflake, BigQuery, or public RDS endpoints are already reachable
- You prefer zero infra to operate (Hosted)
How the agent works (security summary)
- Connects outbound only to the control plane
- Uses mTLS between agent and cloud
- Sync work runs on the agent machine
- See product Security for architecture details
Install path
- Confirm Agent mode is required (hosted vs agent)
- Follow Install the Agent
- Create connections and pipelines as usual