Frequently asked questions
The questions we get asked
Network, data, security, supported systems: the short answers. For anything else, write to us.
Do I need to open ports on devices?
No. The agent always calls the EPM server, over an encrypted outbound connection (TLS 1.3, mutual authentication) to port 8443 on the server. No port is opened on your devices.
Where is my data?
On your own server, inside your network. EPM is installed on your premises (Docker): no data about your fleet goes to a third-party service. An automatic backup runs every night, with a documented restore procedure.
Does EPM work without Internet access?
The console and the agents communicate only inside your local network or over your VPN, and the console is never exposed to the Internet. Data about your fleet does not leave your network. To report flaws, Stack Radar relies on public vulnerability sources (OSV, CISA KEV, EPSS, CERT-FR).
What happens if the console is compromised?
Risky actions (installing a patch, updating an agent, rebooting a server, changing a policy) require approval with a physical security key. The agent refuses an unsigned or tampered package, refuses to stop vital Windows services and refuses to disable itself. Every action stays recorded in the audit log.
Which systems are supported?
Windows (workstations and servers) and Linux (servers). The Linux agent observes the system and applies the fixes you have approved; it does not run arbitrary orders. EPM does not manage macOS or smartphones.
Are roaming devices supported?
Devices must reach the EPM server through your local network or your VPN. Roaming devices outside the VPN are not supported yet.
What fleet size is EPM for?
EPM is designed for 100 to 1,000 devices per installation.
How do I install the agent?
The Windows agent ships as a signed MSI installer: a double-click, or a silent msiexec command you roll out through GPO or Intune. Enrolment takes 3 steps with a time-limited, use-limited, revocable token.
Which languages does the console support?
French and English.
Your question isn't here?
Ask it during a demo, or by email.