How it works · Step 3 of 4
Act: the approved fix runs on the server that raised the alert.
The Virca Worker is a process on your server. It watches the server and runs the fixes your team approves. If no approved fix fits, it stops and tells your team.



Where it runs
The fix happens where the problem lives.
The Worker runs the fix right there on the server.
One outbound TLS connection, no inbound, credentials that stay on the server →

Nothing to assemble first
Once the Worker is installed, it can run approved fixes on the server.

The Linux and Windows servers you run
Web and app servers, on cloud VMs and bare metal. Kubernetes is outside launch scope.
What it may run
A set your team approved, on servers your team assigned.
A fix can only call functions already on the Worker, with no shell escape. Each function was declared with its own limits and grade.
With approval mode on, every run an alert starts waits for approval in Virca.

After approval
Approved once means approved, not unsupervised.
Each run stays inside the line your team drew, and reports back. Approvals and scope →

Only on assigned servers
The fix runs only on the servers your team assigned.

Reverse steps, where written
If the fix didn't hold, the reverse steps its author wrote run in reverse order. If there are none, recovery is manual, and the record says so.

No approved fix fits → your team hears
The run stops and tells your team what the Worker found.

Every run on the record
Who or what started the run, what ran, and what happened next.
