Search documentation

Overview The Windows package installs the AssurIQ collector as a native Windows service, supervised by the Service Control Manager and configured to start aut…

Overview The AssurIQ Endpoint Agent is an architecture, not a rebrand: the collector you deploy today is its first form. The agent is modelled as seven capabi…

Overview The AssurIQ collector is an outbound-only agent. It initiates every connection to the AssurIQ control plane over HTTPS/mTLS on port 443; the control…

Overview Enrollment is the one-time exchange of a random, single-use, short-lived enrollment token for a permanent collector credential. AssurIQ never stores…

…proxy via systemd environment sudo systemctl edit assuriq-collector Drop-in override [Service] Environment="HTTPS_PROXY=http://proxy.internal:3128" Environment="NO_PROXY=localhos…

…ssment On-prem AD hygiene checks Local Evidence Collection Host-local compliance artifacts Not every module listed is available in every release. Check the release notes for the…

Overview A collector never scans or probes a target that is not explicitly in scope. Scope is defined as a set of CIDR ranges, explicit exclusions, and hard-b…

Overview The Docker image runs the same collector binary as the native packages. Use host networking so the container can see local broadcast, ARP and multica…

Overview The v0.1 collector talks to three POST, JSON, snake_case endpoints under /api/v1/collectors. On deployments where the main site is access-restricted,…

Overview A collector uses two separate kinds of trust: its own identity with the AssurIQ control plane (the collector credential issued at enrollment), and an…

Overview Retiring a collector is two separate actions: removing the software from the host, and revoking its credential in AssurIQ. Doing only the first leave…

Overview Each collector reports a heartbeat every 60 seconds. The control plane derives a single health state from the heartbeat history, reported metrics, cr…

Overview Install and operate the Windows collector service. Documentation status This article is a concise reference. A fully expanded guide for “Windows Co…

Overview Install the Linux collector as a systemd service on Ubuntu, Debian or RHEL. Documentation status This article is a concise reference. A fully expan…

Overview Run the collector as a container with host networking. Documentation status This article is a concise reference. A fully expanded guide for “Docker…

Overview Deploy the hardened OVA on VMware or Hyper-V. Documentation status This article is a concise reference. A fully expanded guide for “VM Appliance” i…

Overview Agentless collection for Microsoft 365, Azure, AWS and Google Workspace. Documentation status This article is a concise reference. A fully expanded…

Overview Create, scope, expire and revoke enrollment tokens. Documentation status This article is a concise reference. A fully expanded guide for “Enrollmen…

Overview Outbound-only mutual TLS, endpoints to allow-list, certificate rotation. Documentation status This article is a concise reference. A fully expanded…

Overview Route collector traffic through an explicit or PAC-defined proxy. Documentation status This article is a concise reference. A fully expanded guide…

Overview Auto-upgrade rings and manual upgrade steps. Documentation status This article is a concise reference. A fully expanded guide for “Upgrade Collecto…

Symptoms AssurIQ raises AIQ-COL-001 when a collector has missed its expected heartbeat interval. The site's Collectors panel shows a red status dot, the last-…

Overview AssurIQ does not require an agent on every endpoint to begin discovery, scanning and evidence collection. A single collector, placed correctly, can s…

Overview The Linux package installs the collector as a systemd unit that starts on boot and restarts automatically if it exits unexpectedly. Linux ARM64 is…

Overview Collectors check in with an update channel periodically and, when a new release is available and the current time is inside an allowed window, downlo…

Overview The native collector is at v0.1. This article is the single source of truth for what it actually does today, so other collector articles that describ…