Search documentation

…s This article is a concise reference. A fully expanded guide for “VM Appliance” is scheduled in the documentation roadmap; the steps below are accurate for the current product ver…

Overview The AssurIQ Endpoint Agent is an architecture, not a rebrand: the collector you deploy today is its first form. The agent is modelled as seven capabi…

…le coverage Phase C ARM64 packages for Windows and Linux; hardened VM appliance Phase D Broader fleet-management tooling: staged rollout rings, richer health telemetry, and deeper…

…o the core of the segment it will assess: a server, a small always-on appliance, or a dedicated VM. Avoid laptops or workstations that sleep, roam between networks, or are reimaged…

Overview A collector uses two separate kinds of trust: its own identity with the AssurIQ control plane (the collector credential issued at enrollment), and an…

Overview The Linux package installs the collector as a systemd unit that starts on boot and restarts automatically if it exits unexpectedly. Linux ARM64 is…

Overview The Docker image runs the same collector binary as the native packages. Use host networking so the container can see local broadcast, ARP and multica…

Overview Retiring a collector is two separate actions: removing the software from the host, and revoking its credential in AssurIQ. Doing only the first leave…

Overview The v0.1 collector talks to three POST, JSON, snake_case endpoints under /api/v1/collectors. On deployments where the main site is access-restricted,…

…ing Docker/container image (roadmap) ARM64 packages and a hardened VM/appliance form factor (roadmap) Discovery method is always tcp_connect and scan scopes are always discovery…

Overview Install and operate the Windows collector service. Documentation status This article is a concise reference. A fully expanded guide for “Windows Co…

Overview Install the Linux collector as a systemd service on Ubuntu, Debian or RHEL. Documentation status This article is a concise reference. A fully expan…

Overview Run the collector as a container with host networking. Documentation status This article is a concise reference. A fully expanded guide for “Docker…

Symptoms AssurIQ raises AIQ-COL-001 when a collector has missed its expected heartbeat interval. The site's Collectors panel shows a red status dot, the last-…

Overview The Windows package installs the AssurIQ collector as a native Windows service, supervised by the Service Control Manager and configured to start aut…

What Collector 0.2.0-dev emits interfaces — ifIndex, name, description, MAC, type, MTU, speed, admin/operational status, PVID vlans — VLAN id and name per dev…

Overview Each collector reports a heartbeat every 60 seconds. The control plane derives a single health state from the heartbeat history, reported metrics, cr…

Overview Auto-upgrade rings and manual upgrade steps. Documentation status This article is a concise reference. A fully expanded guide for “Upgrade Collecto…

Overview The AssurIQ collector is an outbound-only agent. It initiates every connection to the AssurIQ control plane over HTTPS/mTLS on port 443; the control…

Overview Where a site enforces all outbound traffic through a proxy, configure the collector to use it explicitly. Because the collector runs as a system serv…

Overview A collector never scans or probes a target that is not explicitly in scope. Scope is defined as a set of CIDR ranges, explicit exclusions, and hard-b…

Overview Collectors check in with an update channel periodically and, when a new release is available and the current time is inside an allowed window, downlo…

Overview Route collector traffic through an explicit or PAC-defined proxy. Documentation status This article is a concise reference. A fully expanded guide…

Overview Enrollment is the one-time exchange of a random, single-use, short-lived enrollment token for a permanent collector credential. AssurIQ never stores…

Overview Agentless collection for Microsoft 365, Azure, AWS and Google Workspace. Documentation status This article is a concise reference. A fully expanded…

Overview Create, scope, expire and revoke enrollment tokens. Documentation status This article is a concise reference. A fully expanded guide for “Enrollmen…

Overview Outbound-only mutual TLS, endpoints to allow-list, certificate rotation. Documentation status This article is a concise reference. A fully expanded…