1. An apparatus for endpoint-hosted hypervisor management, comprising; a hypervisor-resident, policy-based, virtual management agent running in a privileged context and configured to manage at least one host OS from outside said OS, said host OS comprising a virtual machine (VM) running on an underlying hardware-based device.