Thanks for the HN link, that's what I looked for but somehow algolia wasn't giving me the result at the time.

Two points about a potential trial. 1) Since it's a runtime tool to actually see what it can detect I assume I will actually have to generate some attacks myself to actually see it in affect? It also makes false positive testing a little harder.

The reporting and such is on the cloud I presume? Are there some documentation on what happens at the agent level and what gets send to the cloud?