Search documentation

…— each negotiated by key and version at heartbeat. Agents that do not report capabilities keep working unchanged; the control plane infers Asset Sensor from the collector version a…

Overview The Docker image runs the same collector binary as the native packages. Use host networking so the container can see local broadcast, ARP and multica…

…available. Use an x64 host or VM for now. Download the installer Generate a one-time enrollment token from the site's collector setup page — this also gives you the exact down…

…oken — check the site's Collectors panel for an unexpected new entry. Generate a fresh token and retry. AIQ-ENR-002 — Token expired Tokens are short-lived by design. If too muc…

Overview Each collector reports a heartbeat every 60 seconds. The control plane derives a single health state from the heartbeat histo…

…t behavior. Supported today Enrollment, heartbeat and observation reporting to the AssurIQ control plane over the API v1 endpoints Explicit CIDR-based scan scopes with exclusio…

…never be reactivated. If the same site needs a collector again later, generate a new enrollment token and run the install/enroll flow again; this creates a fresh credential rather…

…healthy, connectivity is confirmed, and the collector still will not report a heartbeat, generate a new enrollment token for the site and re-run the install command for the host's…

…POST /api/v1/collectors/heartbeat /api/public/v1/collectors/heartbeat Report liveness, version and health; receive commands and current scan scopes POST /api/v1/collectors/observat…

…r the current list. Module Purpose Core Heartbeat Liveness, version reporting and enrollment lifecycle — always active Network Discovery ARP/ICMP sweeps and host seeding Host Inv…

Overview AssurIQ does not require an agent on every endpoint to begin discovery, scanning and evidence collection. A single collector, placed correctly, can s…

Overview Run the collector as a container with host networking. Documentation status This article is a concise reference. A fully expanded guide for “Docker…

Overview Create, scope, expire and revoke enrollment tokens. Documentation status This article is a concise reference. A fully expanded guide for “Enrollmen…

Overview The Linux package installs the collector as a systemd unit that starts on boot and restarts automatically if it exits unexpectedly. Linux ARM64 is…

Overview The AssurIQ collector is an outbound-only agent. It initiates every connection to the AssurIQ control plane over HTTPS/mTLS on port 443; the control…

Overview Where a site enforces all outbound traffic through a proxy, configure the collector to use it explicitly. Because the collector runs as a system serv…

Overview A collector never scans or probes a target that is not explicitly in scope. Scope is defined as a set of CIDR ranges, explicit exclusions, and hard-b…

Overview Install and operate the Windows collector service. Documentation status This article is a concise reference. A fully expanded guide for “Windows Co…

Overview Install the Linux collector as a systemd service on Ubuntu, Debian or RHEL. Documentation status This article is a concise reference. A fully expan…

Overview Deploy the hardened OVA on VMware or Hyper-V. Documentation status This article is a concise reference. A fully expanded guide for “VM Appliance” i…

Overview Agentless collection for Microsoft 365, Azure, AWS and Google Workspace. Documentation status This article is a concise reference. A fully expanded…

Overview Outbound-only mutual TLS, endpoints to allow-list, certificate rotation. Documentation status This article is a concise reference. A fully expanded…

Overview Route collector traffic through an explicit or PAC-defined proxy. Documentation status This article is a concise reference. A fully expanded guide…

Overview Auto-upgrade rings and manual upgrade steps. Documentation status This article is a concise reference. A fully expanded guide for “Upgrade Collecto…

Overview A collector uses two separate kinds of trust: its own identity with the AssurIQ control plane (the collector credential issued at enrollment), and an…

Overview Collectors check in with an update channel periodically and, when a new release is available and the current time is inside an allowed window, downlo…

What Collector 0.2.0-dev emits interfaces — ifIndex, name, description, MAC, type, MTU, speed, admin/operational status, PVID vlans — VLAN id and name per dev…