Search documentation

Overview Each collector reports a heartbeat every 60 seconds. The control plane derives a single health state from the heartbeat history, reported metrics, credential status an…

…urIQ collector as a native Windows service, supervised by the Service Control Manager and configured to start automatically on boot. Windows ARM64 is on the roadmap and not yet…

…an outbound-only agent. It initiates every connection to the AssurIQ control plane over HTTPS/mTLS on port 443; the control plane never opens a connection back to the collector. N…

…h schedule and concurrency limits — and it is enforced on the AssurIQ control plane, not just trusted to the collector's local configuration. Server-side enforcement Even if a co…

…t. Agents that do not report capabilities keep working unchanged; the control plane infers Asset Sensor from the collector version and marks everything else Not reported. What is…

…new token; revocation is final and cannot be undone. AIQ-ENR-004 — Control plane unreachable The token itself may be valid, but the host could not complete the outbound HTTPS/…

…covery/assessment modules and the trust relationship with the AssurIQ control plane. Why Go The initial collector implementation is built in Go. Go compiles to small, dependenc…

…-e ASSURIQ_ENROLLMENT_TOKEN="<one-time-token>" \ -e ASSURIQ_URL="<control-plane-url>" \ -v assuriq-collector-data:/var/lib/assuriq \ assuriq/collector:latest docker compo…

…ssurIQCollectorSetup.exe /quiet ENROLLMENT_TOKEN=<token> ASSURIQ_URL=<control-plane-url> PROXY_URL=http://proxy.internal:3128 To change the proxy after install, update the collec…

…so a collector on an unauthenticated network path can still reach the control plane. Endpoint Mirror Purpose POST /api/v1/collectors/enroll /api/public/v1/collectors/enroll Excha…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…r uses two separate kinds of trust: its own identity with the AssurIQ control plane (the collector credential issued at enrollment), and any target credentials stored in the Creden…

…tor's site stops receiving fresh automatic evidence from that source. Controls that depended solely on that evidence move toward EVIDENCE GAP over time rather than failing outright…

…back to the primary site) needs its own outbound path to the AssurIQ control plane. Err toward fewer collectors when scope allows it — each collector is one more host to patch,…

…e-time token assuriq-collector enroll --token <one-time-token> --url <control-plane-url> The CLI exchanges the token for a permanent collector credential, stores it under a root-…

…nt hostname is excluded from any TLS inspection, the same as the main control-plane endpoint. Retry the update check; a single corrupted download from a transient network issue wil…

…oday Enrollment, heartbeat and observation reporting to the AssurIQ control plane over the API v1 endpoints Explicit CIDR-based scan scopes with exclusions and blocked targets Co…