Two flavors: Local = scanner runs on the same box as the file being watched (fast, zero-network). SSH agent = scanner SSHes into the target box using a restricted key; only footprint on that box is one authorized_keys entry. Great for stealth deployment where you don't want developers on the monitored box to see DriftSense installed. Paste a PEM key below to store it in the DB (encrypted). Test any row with the "Test" button.