CyfroAgent

Lightweight agent that acts as your infrastructure's eyes and ears, executing scans, collecting host telemetry, and inventorying assets with outbound-only connectivity.

Book a DemoContact Sales
The Agents widget in the CyfroSec dashboard.

What it does

Collect security evidence from your hosts.

Lightweight agents run on your hosts and perform all scan operations.

  1. 01

    Executes Network Discovery, Asset Discovery, and Service Fingerprinting scans

  2. 02

    Collects local host inventory including processes, services, routes, and ARP cache data

  3. 03

    Provides minimal-footprint telemetry and scan orchestration from monitored hosts

  4. 04

    Uses outbound-only connections so no inbound firewall openings are required

Designed for production hosts

  • Lightweight by design

    Minimal CPU and memory overhead makes it safe to run continuously on production hosts.

  • Secure transport

    Outbound-only connectivity keeps your firewall closed while the platform still receives scan data.

  • Central to every scan

    Agents provide the execution layer for discovery, fingerprinting, and downstream AI analysis.

Deploy an agent

One Docker command per host

A working copy of the CyfroAgent page. Generate a one-time token, name the agent and its location, and the install command updates as you type. The encryption key is mounted from a protected file, never passed on the command line.

Interactive preview with fictional data.

CyfroAgent

Deploy and manage security agents

Prerequisites

  1. 1. Install Docker Desktop or Docker Engine
  2. 2. Ensure Docker is running
  3. 3. Pull the CyfroAgent Docker image
  4. 4. Preview a sample registration token
  5. 5. Run the container with the registration token
Step 1

Registration Token

Preview how a registration token connects an agent to your account. This example token cannot register an agent.

Example token inserted below. Real tokens are single-use and time-limited.

Adjust the fictional agent details to see the command update in Step 2.

Enter an agent name before copying the install command.

Fernet Encryption Key

The sample key shows how encryption is configured. Real keys stay in a protected file and are omitted from the command.

Step 2

Docker Installation

Preview the installation command using the sample details from Step 1. Register real agents from your authenticated workspace.

In a real deployment, store your encryption key at ~/.config/cyfrosec/cyfro-agent-fernet.key with mode 0600 before running this command. Docker mounts it read-only; the key is not placed in container process arguments.

docker run -d \
  --name cyfro-agent \
  --network host \
  --cap-add=NET_RAW --cap-add=NET_ADMIN \
  -v cyfro-agent-data:/data/agent \
  -v /:/host:ro \
  --mount type=bind,src="${HOME}/.config/cyfrosec/cyfro-agent-fernet.key",dst=/run/secrets/cyfro_fernet_key,readonly \
  cyfrosec/cyfro-agent:latest \
  --agentName 'Demo-Web-Agent' \
  --token 'example-registration-token' \
  --fernet-key-file /run/secrets/cyfro_fernet_key \
  --location 'Example web environment'

Preview only. The sample token and key cannot connect an agent.

Token Information

  • Each agent requires its own unique registration token
  • Each token can only be used once
  • Old tokens are automatically revoked after use
Illustration. Example agents and values; no token or key is generated here.

Secure everything from Code to Cloud. From Exposure Discovery to Remediation.

See CyfroSec in action with a live demo, or talk to our team about your specific needs.

Book a DemoContact Sales