What the endpoint agent does
The agent runs quietly on Windows, macOS and Linux and keeps an up-to-date inventory of installed software, operating system version and patch level. It matches that inventory against known vulnerabilities and watches for processes that should not be there.
Everything reports to the same dashboard as your dark web and attack surface findings, giving you an inside and outside view of your risk in one place.
Deployment in minutes
- Download the installer for each platform from the dashboard, or roll it out remotely.
- Agents register automatically and appear in the centralized fleet view.
- Vulnerability checks and inventory updates run continuously; the agent updates itself.
- Findings are prioritised by severity and mapped to compliance controls like every other finding.
Designed for small IT teams
There is no on-premise server to maintain and no agent tuning. The dashboard answers the questions auditors and managers ask: how many devices, how many unpatched, which ones are running vulnerable software, and what was done about it.
Capabilities
- Windows, macOS and Linux support
- Real-time vulnerability detection
- Installed software inventory
- OS and patch level tracking
- Suspicious process monitoring
- Auto-update and remote deployment
- Centralized fleet dashboard
Who it is for
- Businesses with remote or hybrid staff and no endpoint management
- IT teams that need patch-level evidence for ISO 27001 or NIS2
- MSPs managing device fleets for several customers
Frequently asked questions
Is the agent an antivirus replacement?
No. It focuses on vulnerability and inventory visibility and suspicious process monitoring, and works alongside your existing antivirus or EDR.
How heavy is the agent?
It is designed to be lightweight with minimal CPU and memory use, and it does not interrupt the user.
Which data leaves the device?
Software inventory, OS and patch metadata, and process alerts. No file contents or user documents are collected.