Endpoint Agents

Endpoint agents are lightweight background services that monitor directories on your machines and automatically submit new files for analysis. Deploy them across your fleet for continuous, real-time visibility into every file that appears on your endpoints.

Supported Platforms

Agents are available for all major operating systems and architectures:

Windows

x64 (64-bit)

Linux

x64 and arm64

macOS

x64 (Intel) and Apple Silicon

Quick Install

Select your platform below for installation instructions. Each platform uses a single binary with no external dependencies.

Download the installer

Download the latest Windows installer from the Agents page in your portal. The installer is a standard .exe that requires administrator privileges.

Run as administrator

Right-click the installer and select "Run as administrator." Follow the on-screen prompts to install the agent service. The installer registers the agent as a Windows service that starts automatically on boot.

Enroll with your code

Open a terminal (Command Prompt or PowerShell) as administrator and run:

va enroll --code YOUR_CODE

Enrollment

After installation, each agent must be enrolled with your organization. Enrollment links the agent to your tenant and applies your scan policies.

1
Generate an enrollment code
Go to the Agents page in your portal and click New Enrollment Code. Codes are short-lived for security: use them promptly after generation.
2
Run the enrollment command
On the target machine, run the following command with your enrollment code:
```
va enroll --code YOUR_CODE
```
3
Agent registers and begins scanning
The agent authenticates with the platform, downloads its assigned scan policy, and immediately begins monitoring the configured directories. You will see it appear as "online" on the Agents page within seconds.

Scan Policies

Scan policies control what each agent monitors and how aggressively it scans. Create and assign policies from the portal to fine-tune agent behavior for different use cases.

Setting	Description
Watched directories	Which directories the agent monitors for new files.
File types	Which file extensions to include or exclude from scanning.
Scan interval	How frequently the agent checks for new or changed files.
Max file size	Upper size limit for files submitted for analysis (up to 500 MB).

Fleet Management

The Agents page provides a centralized view of every enrolled device in your organization. Monitor agent health and manage your fleet from a single dashboard.

Device inventory: see every enrolled machine with its hostname, OS, and agent version.
Status monitoring: real-time online/offline status and last seen timestamp for each agent.
Policy assignment: assign or change scan policies per device or in bulk.
Remote commands: send commands to agents for quarantine actions and file restoration.

Enforcement Modes

Each agent operates in one of two enforcement modes, which you can toggle from the Settings page in your portal. Start with Monitor mode while evaluating, then switch to Enforce when ready.

Monitor

Blocked files are logged but not quarantined. The agent records the detection and reports it to the dashboard, but the file remains accessible to the user. Ideal for observation and policy tuning before enabling enforcement.

Enforce

Blocked files are moved to quarantine automatically. The file is removed from its original location and placed in a secure quarantine directory. Admins can restore quarantined files from the agent management page if a file is blocked incorrectly.

Deployment at Scale

For organizations deploying agents to many machines, the portal provides tools and guides for automated deployment:

Group Policy (Windows): deploy via GPO for domain-joined machines.
Configuration management: use your existing automation tools (Ansible, Puppet, Chef, etc.).
MDM (macOS): distribute via mobile device management profiles.

For detailed step-by-step deployment guides, visit the Agent Guide in your portal.

Plan Requirements

Agent availability varies by plan. Choose the tier that matches your fleet size:

Plan	Max Agents	Enforcement
Free	Not available	:
Pro	10	Monitor + Enforce
Business	50	Monitor + Enforce
Enterprise	Unlimited	Monitor + Enforce

Need more agents? Compare plans or contact us for Enterprise pricing.

Having Issues?

Check the Troubleshooting guide for solutions to common agent problems including enrollment failures, offline agents, and scanning issues.