But... how does it work? Without such information this article reads little better than an advertisement.
My thought exactly. My gut feeling says the value is in the range from "inadequate" to "bullshit" since I cannot see a way in which software on an external device can run with higher priority than software on the server itselves to which it is connected.
Maybe it injects itself using some hardware hooks, more or less the same way as described in this this previously submitted article: https://news.ycombinator.com/item?id=6393029
With such a hardware root-kit, it could be possible to detect other software root-kits by looking for patterns in memory and/or other suspicious behaviour.
This is a pretty useless fluff article. I am none-the-wiser as to how this will work to protect my farm of Linux VM's. To add insult to injury the Lynuxworks website has run out of steam.
At first glance I thought it had a key switch on the front. If it did, then I would trust it...