FAQ

Is Lorika free?

Yes, the Free plan is fully functional for up to 5 devices. Paid plans add higher scan frequency, unlimited devices, cloud integrations, and AI recommendations.

Does the agent send my files?

No. The agent only sends:

• System metadata (OS version, hostname)
• Installed package names + versions (no file contents)
• Security check results (pass/fail/warning)
• Anonymized telemetry if you opt in

No file contents, passwords, or user data ever leave the device.

Where is my data stored?

European Union (Contabo datacenter, Germany). Sentry observability also in EU (de.sentry.io).

Can I self-host?

Not yet officially supported. The codebase is open and Docker Compose works for local dev. Production self-hosting guide is on the roadmap.

Does it work offline?

The agent buffers scan results locally and sends them when connectivity returns. Up to 24 hours of buffered data.

Will the agent slow down my device?

Resource usage is capped:

• <50 MB RAM idle
• <1% CPU during scans
• Scans run in background, respecting system idle state

Can I exclude certain devices from specific checks?

Not in v1 — all devices get all checks relevant to their OS. Planned for v2 (check-level profiles per device group).

What if a CVE has no patch?

See Vulnerabilities — no-patch handling. You get compensating controls instead of vague "monitor for updates".