# Decide whether Straza fits

The pages an IAM or security architect reads, in order, to decide whether to run a pilot.


[Howitworks](https://docs.straza.ai/evaluate/how-it-works/index.md)describesthemodelthatthelaterpagesbuildon.-[WhatStrazais](https://docs.straza.ai/evaluate/what-straza-is/index.md):WhatStrazadoes,whoitisfor,andwhatitdoesnottrytodo.-[Howitworks](https://docs.straza.ai/evaluate/how-it-works/index.md):Adiagramofeverycorenoun,andatoolcalltracedontheagent'smachineandatthegateway.-[Thesecuritymodel](https://docs.straza.ai/evaluate/security-model/index.md):WhatStrazaenforcesandwhere.Anactionthatbypassesthehook,thegatewayand`strazaexec`isoutsideStraza'sview.-[Knownlimits](https://docs.straza.ai/security/known-limits/index.md):Atableoftheknownlimitsthatmatterforafleet.IfyoumanageClaudeCodethroughadevicemanagementprofile,server-managedsettingsoraWindowsregistrypolicy,readtherowonitsmanagedsourcesfirst.ClaudeCodeusesonlyitshighestmanagedsource,soifanyofthoselacksStraza'shooks,ClaudeCodeskipsthehooksandgivesnowarning.-[IdentityandyourIGA](https://docs.straza.ai/evaluate/identity-and-your-iga/index.md):Youridentityprovidercheckssign-in,andyourIGA,oranadminonstandalone,ownspeople,agentsandwhoholdswhichrole.Strazaownswhateachrolemaydo.-[Objects](https://docs.straza.ai/concepts/objects/index.md):Howarolecoverssomeofaserver'sobjects,andwhatacertifierreadsinyourIGA.-[Tryitonthedemostack](https://docs.straza.ai/evaluate/try-it-on-the-demo-stack/index.md):RunmidPoint,Keycloakandworkingagentsononemachine,andcheckyourpilot'squestionsagainstthem.-[Planyourdeployment](https://docs.straza.ai/reference/standalone-and-enterprise/index.md):Thestandaloneandenterpriseprofilescompared,withthesettingbehindeachdifference.ReaditonceyoudecidethatStrazafits.Next:[SetupStrazaforateam](https://docs.straza.ai/guides/set-up-straza-for-a-team/index.md)