Skip to content
Logo probo
Get compliant

Products

Compliance Officer Service Expert-led compliance, end to end Compliance Portal Share security documents securely Open-source platform Deploy Probo on your own infrastructure

Resources

Probo stories How teams get compliant with Probo Blog Ideas and guidance from the Probo team Guides & tools Practical compliance guides and free tools Love from Customers What customers say about working with Probo Changelog Latest product updates Download Get the Probo Agent

Company

About The people and vision powering Probo Careers Join the team building Probo Brand assets Official logos and visual resources Security Review our security and compliance posture

Explore

Docs Documentation for Probo GitHub Explore our open-source compliance tools

Probo Agent Overview

Probo Agent (probo-agent) is a lightweight device posture agent. It runs as a managed OS service, enrolls a device against your Probo organization, and periodically reports security posture checks over the /api/agent/v1 API.

What it does

Section titled “What it does”
  • Enrolls devices with a one-shot enrollment token from the Probo console
  • Runs as an OS service on macOS (launchd), Linux (systemd), FreeBSD (rc.d), and Windows (Service Control Manager)
  • Collects posture checks such as disk encryption, screen lock, firewall, time sync, OS version, auto-update, password policy, remote login, and malware protection
  • Heartbeats and reports posture results to Probo on a server-configured interval
  • Auto-updates from signed GitHub Releases (probo-agent/v*), with Cosign/Sigstore verification before installing a new binary

Supported platforms

Section titled “Supported platforms”
Platform Install options Enrollment
macOS Signed universal .pkg Browser / tray via Probo Agent.app and probo:// deeplink
Windows Signed .msi Tray-assisted browser enrollment from the Probo console
Linux install.sh, CLI archive CLI (install.sh or probo-agent install)
FreeBSD install.sh, CLI archive CLI (install.sh or probo-agent install)

macOS and Windows: Desktop install. Linux and FreeBSD: Server install.

How enrollment works

Section titled “How enrollment works”
  1. Create or open a device in the Probo console and generate an enrollment token.
  2. Install the agent — on desktops, prefer the package installer then enroll from us.probo.com/enroll or eu.probo.com/enroll; on servers, pass the server URL and token on the command line.
  3. The agent exchanges the one-shot token for a device API key, configures heartbeat/posture intervals, and starts the OS service.
  4. Posture results appear on the device in the Probo console.

Posture checks

Section titled “Posture checks”

The agent evaluates this check set on each collection cycle:

Check key What it verifies
DISK_ENCRYPTION Full-disk encryption is enabled
SCREEN_LOCK Screen lock / idle lock is configured
FIREWALL_ENABLED Host firewall is enabled
TIME_SYNC System clock synchronization is active
OS_VERSION Operating system meets the expected version policy
AUTO_UPDATE Automatic updates are enabled
PASSWORD_POLICY Local password policy is present
REMOTE_LOGIN Remote login exposure is assessed
MALWARE_PROTECTION Built-in malware protection is enabled where applicable

Use probo-agent collect to run the checks locally without pushing results.

Next steps

Section titled “Next steps”
Desktop install macOS and Windows: package installer, then enroll from the Probo console
Server install Linux and FreeBSD: install.sh or CLI enrollment
Commands install, uninstall, status, collect, update, and more
Download Get the latest release for your platform