Do I need to install an agent on every server?

No. VixPro AI supports multiple connection methods — you choose the right one for each server.

• Go Agent (recommended) — lightweight binary, installs with one command, connects outbound via WebSocket. No inbound ports, no SSH exposure, works behind NAT and firewalls
• Cloud API — connects through your existing cloud provider infrastructure (AWS SSM, GCP IAP, Azure Run Command) using your own IAM credentials. No agent, no SSH port required
• SSH — supported for environments where neither option is practical

All three connection methods use the same security gate chain, the same tool registry, and the same audit logging.