> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zwiron.com/llms.txt
> Use this file to discover all available pages before exploring further.

# When to Use the Zwiron Agent

> Use the Zwiron outbound-only agent when databases sit in a VPC or on-prem and row data must stay in your network during sync.

You need the [Zwiron Agent](/concepts/agent) only when **Agent mode** is the right execution mode. If every source and destination is reachable over the internet, use [Hosted mode](/guides/hosted-vs-agent) and skip installation.

## Use the agent when

* Production databases are in a **private VPC** or **on-prem**
* Security policy says **row data must not leave your network** during sync
* You cannot open inbound DB ports to a SaaS ETL vendor
* You still want catalog, quality, and the same Zwiron UI

## Skip the agent when

* Sources like Snowflake, BigQuery, or public RDS endpoints are already reachable
* You prefer zero infra to operate ([Hosted](/concepts/execution-modes))

## How the agent works (security summary)

* Connects **outbound only** to the control plane
* Uses **mTLS** between agent and cloud
* Sync work runs **on the agent machine**
* See product [Security](https://zwiron.com/security) for architecture details

## Install path

1. Confirm Agent mode is required ([hosted vs agent](/guides/hosted-vs-agent))
2. Follow [Install the Agent](/getting-started/install-agent)
3. Create connections and pipelines as usual

## Related

* [The Agent](/concepts/agent)
* [Install the Agent](/getting-started/install-agent)
* [Postgres CDC to Snowflake](/guides/postgres-cdc-to-snowflake)