Is this installed specifically on the endpoints or can it be installed on a network gateway (my edge router/gateway is a GNU/Linux machine) to provide analytics and security for the whole LAN?

The website seems to be very light on any technical details, doesn't give me a slightest idea how it operates. Looking at the comments here I suspect it's a endpoint firewall using a VPN (SPN) to tunnel all the traffic through a virtualized network interface and apply rules and analytics to it.