The operational model typically works like this: a managed security provider deploys lightweight agents on every endpoint - workstations, servers, mob..