Search documentation

Overview The Windows package installs the AssurIQ collector as a native Windows service, supervised by the Service Control Manager and configured to start aut…

Overview The AssurIQ collector is an outbound-only agent. It initiates every connection to the AssurIQ control plane over HTTPS/mTLS on port 443; the control…

Overview The AssurIQ Endpoint Agent is an architecture, not a rebrand: the collector you deploy today is its first form. The agent is modelled as seven capabi…

…ssment On-prem AD hygiene checks Local Evidence Collection Host-local compliance artifacts Not every module listed is available in every release. Check the release notes for the…

Overview Enrollment is the one-time exchange of a random, single-use, short-lived enrollment token for a permanent collector credential. AssurIQ never stores…

Overview A collector never scans or probes a target that is not explicitly in scope. Scope is defined as a set of CIDR ranges, explicit exclusions, and hard-b…

Overview The Docker image runs the same collector binary as the native packages. Use host networking so the container can see local broadcast, ARP and multica…

Overview Where a site enforces all outbound traffic through a proxy, configure the collector to use it explicitly. Because the collector runs as a system serv…

Overview The v0.1 collector talks to three POST, JSON, snake_case endpoints under /api/v1/collectors. On deployments where the main site is access-restricted,…

Overview A collector uses two separate kinds of trust: its own identity with the AssurIQ control plane (the collector credential issued at enrollment), and an…

Overview Retiring a collector is two separate actions: removing the software from the host, and revoking its credential in AssurIQ. Doing only the first leave…

Overview Each collector reports a heartbeat every 60 seconds. The control plane derives a single health state from the heartbeat history, reported metrics, cr…

Overview Install and operate the Windows collector service. Documentation status This article is a concise reference. A fully expanded guide for “Windows Co…

Overview Install the Linux collector as a systemd service on Ubuntu, Debian or RHEL. Documentation status This article is a concise reference. A fully expan…

Overview Run the collector as a container with host networking. Documentation status This article is a concise reference. A fully expanded guide for “Docker…

Overview Deploy the hardened OVA on VMware or Hyper-V. Documentation status This article is a concise reference. A fully expanded guide for “VM Appliance” i…

Overview Agentless collection for Microsoft 365, Azure, AWS and Google Workspace. Documentation status This article is a concise reference. A fully expanded…

Overview Create, scope, expire and revoke enrollment tokens. Documentation status This article is a concise reference. A fully expanded guide for “Enrollmen…

Overview Outbound-only mutual TLS, endpoints to allow-list, certificate rotation. Documentation status This article is a concise reference. A fully expanded…

Overview Route collector traffic through an explicit or PAC-defined proxy. Documentation status This article is a concise reference. A fully expanded guide…

Overview Auto-upgrade rings and manual upgrade steps. Documentation status This article is a concise reference. A fully expanded guide for “Upgrade Collecto…

Overview AssurIQ does not require an agent on every endpoint to begin discovery, scanning and evidence collection. A single collector, placed correctly, can s…

Overview The Linux package installs the collector as a systemd unit that starts on boot and restarts automatically if it exits unexpectedly. Linux ARM64 is…

Overview Collectors check in with an update channel periodically and, when a new release is available and the current time is inside an allowed window, downlo…

Overview The native collector is at v0.1. This article is the single source of truth for what it actually does today, so other collector articles that describ…