All processes, modules, and libraries that are packaged with the host agent fall under its border. The Host Agent can, but is not necessary to, run on the platform as a daemon or service. Although having a local or remote Graphical Interface (GUI) for management is not anticipated for the Host Agent, this PP-Module does not forbid it. It is anticipated that the linked ESM server or the underpinning platform would administer the host agents. The communication path with other Host Agents, a Smtp server, or a public cloud is included in the TOE border. A host agent assessment does not cover the platform operating system or execution environment in which the host agent is running.