Agentless · macOS · one-time or recurring

See exactly what’s installed across your machines.

Three steps. No account, no agent to install. Copy a script, run it, and read your inventory — every package, model, and extension, joined to live malware intelligence.

Create an ingest key

The collector uploads to your tenant using this key. It’s scoped to your organization, revocable, and shown only once — copy it now. Keys are managed under your account.

checking your session…

Run the collector

One shell script. It reads the specific locations where packages, models, and extensions live — no full-disk crawl, no kernel agent, no package managers invoked. Read it first if you like: it’s plain, auditable bash.

Run in Terminal

curl -fsSL /collect.sh | bash -s -- \
  -u /api/v1/ingest \
  -t <ingest-key>

Prefer to inspect first? view collect.sh · nothing leaves the machine except the inventory of names + versions you see uploaded.

Read your inventory

The moment a device reports in, its inventory appears here — joined against our threat intel, with any malicious artifacts pulled to the top.