Quick start
If your employer asked you to install the Secureframe Agent, follow these four steps:
Download your agent package from the Employee Onboarding page (Device Management in the left sidebar). Choose your operating system and click Download Agent. Each person gets a unique package, so only download from your own account.
Install the package on your device:
Windows: Double-click the downloaded file and click Yes.
Mac: Double-click the downloaded file and click Install.
Linux: Open a terminal in the download folder and run
sudo dpkg -i secureframe-agent.deb(Ubuntu) orsudo rpm -i secureframe-agent.rpm(CentOS/RHEL).
Complete onboarding: Return to the Employee Onboarding page and click "If you have downloaded the agent or your operating system is not listed, click here to pass the onboarding installation step." Skipping this step is a common reason onboarding does not show as complete.
Done. Your device should sync with Secureframe within a few hours. You do not need to take further action unless your admin asks you to configure additional security settings (see below).
Tip: Having trouble downloading or installing? See our Secureframe Agent FAQ for help with a spinning download button, offline agent, macOS install warnings, and more.
Supported Operating Systems
Secureframe Agent is a read-only agent designed to help your organization be secure by reporting on key device settings that are required for compliance frameworks. The data sent to Secureframe is the minimum information required to determine if a device is compliant.
These are the current operating system versions we support:
OS | Supported version(s) |
MacOS | 13.X+ (Ventura and above) |
Windows | 10, 11 |
Linux | Ubuntu 20.04+, RHEL 9.0+, CentOS 8 (EoL) |
Installing the Secureframe Agent on Your Device
If you received an onboarding email from Secureframe, your employer has partnered with us to streamline compliance tasks such as security training, policy reviews, and device management.
This guide walks through how to download and install the Secureframe Agent, also called Device Management in Employee Onboarding.
Downloading your Agent package
Log into Secureframe and visit the Employee Onboarding page.
From the left sidebar, click Device Management.
Choose your operating system and click Download Agent.
Tip: If the download button keeps spinning, wait a few minutes and refresh the page. Secureframe builds a unique installer for each user, which can take a few minutes. For more help, see FAQs: Secureframe Agent installation, coverage, and troubleshooting.
Installing your Agent package
Windows: Double-click your downloaded package and click Yes.
MacOS: Double-click your downloaded package and click Install.
Linux: Open a terminal, go to the folder with your downloaded package, and run the command for your operating system:
Ubuntu (.deb):
sudo dpkg -i secureframe-agent.debCentOS (.rpm):
sudo rpm -i secureframe-agent.rpm
After installing, return to Employee Onboarding and click "If you have downloaded the agent or your operating system is not listed, click here to pass the onboarding installation step."
Important:
One package per person: Each device downloads a unique installation package that links your user account to your device. Do not download and install the same package on multiple devices. This can cause devices to disappear from Asset Inventory or report incorrect statuses.
Windows Defender warnings: If using Windows Defender, you may see an unknown publisher warning. Secureframe Agent packages are signed for users joined after Feb 8, 2025. Contact your admin if this is a problem. Manual evidence can be uploaded if you choose not to install the Agent.
After install, you may also need to...
Installing the agent reports your device to Secureframe, but your organization may also require specific security settings on your laptop. If a compliance check is failing, use the guides below for step-by-step setup instructions:
On Linux, some checks are not supported due to operating system limitations. See Fields Pulled for details.
Installed but not showing in Asset Inventory?
If you installed the agent but your device is not appearing, or onboarding still shows as incomplete, check the following before contacting support:
Allow time to sync. The agent must stay online for at least 5 minutes to connect. Your device may take a few hours to appear in Asset Inventory after installation.
Click the pass-onboarding link. Installing the agent alone does not mark onboarding complete. Return to Employee Onboarding and click "If you have downloaded the agent or your operating system is not listed, click here to pass the onboarding installation step."
Use only your own package. Each user must download and install their own agent build. Installing the same package on multiple devices (or sharing a download link) can prevent devices from reporting correctly.
Confirm the agent is running. On Windows, check Services for Fleet osquery or Orbit Osquery. If the agent shows as offline, see the FAQ articles below.
Re-download if needed. If installation appeared successful but the device never syncs, uninstall the agent, download a fresh package from Employee Onboarding, and reinstall. You must uninstall the old agent before installing a new one.
If the issue persists after trying the steps above, contact [email protected] with your device name, operating system, and the email address you use to log into Secureframe.
More help
For additional questions about installation, troubleshooting, and agent behavior, see:
Secureframe Agent: Frequently Asked Questions (FAQ) — download spinner, offline agent, confirming installation, and more
FAQs: Secureframe Agent installation, coverage, and troubleshooting — device not appearing, reinstalled agent, macOS install errors, and more
Unenrolling & Uninstall Secureframe Agent — how to remove the agent from your device