# Evaluate

What Straza is, how it works and where its limits are, then how to try it on a laptop or the demo stack.





- [Decide whether Straza fits](https://docs.straza.ai/evaluate/decide-whether-straza-fits/index.md): The pages an IAM or security architect reads, in order, to decide whether to run a pilot.
- [What Straza is](https://docs.straza.ai/evaluate/what-straza-is/index.md): What Straza does, where it decides, who it is for, and what it does not try to do.
- [How it works](https://docs.straza.ai/evaluate/how-it-works/index.md): The parts of Straza, and how Straza decides each tool call before the tool runs.
- [The security model](https://docs.straza.ai/evaluate/security-model/index.md): What Straza enforces and where, what it trusts, and which actions it does not see.
- [Identity and your IGA](https://docs.straza.ai/evaluate/identity-and-your-iga/index.md): What your identity provider, your IGA and Straza each decide, and how the first admin signs in.
- [Try it on the demo stack](https://docs.straza.ai/evaluate/try-it-on-the-demo-stack/index.md): Run Straza with midPoint, Keycloak, AI agents and MCP servers on one machine, and see what the seeded stack does.
- [Your first approval on one laptop](https://docs.straza.ai/evaluate/first-approval-on-one-laptop/index.md): Hold your agent's command on your laptop until you approve it.
- [Try it on one laptop](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md): Run Straza and Claude Code on your own computer. A starter rule denies a command, and you approve a held command in the browser.