Secureframe Agent: Unenrolling & Uninstall Secureframe Agent

The Secureframe Agent is a read-only agent designed to help smaller organizations be secure by reporting on key device settings.

Un-enroll your organization and archive the integration

  1. Navigate to Integrations > Secureframe Agent.
  2. Click the three vertical dots on the right hand side, then Archive.  A pop up will appear confirming you want to archive the integration.
  3. Click Archive.


Once disconnected, Secureframe will stop receiving information from installed agents. If you need additional help removing the Secureframe Agent integration, please contact your Customer Success representative or Customer Support at 

In addition, we recommend users uninstall the agent from their devices. Further information on how users can uninstall the Secureframe Agent from their devices can be found within this article.


Uninstall Secureframe Agent From Your Device

Devices will automatically de-register 30 days after being uninstalled. Deleting the device from Asset Inventory before 30 dayswill result in the device re-populating. If you cannot wait for the automatic expiration, please contact support.


Use the "Add or remove programs" dialog to remove “Fleet osquery." It might also be named "Orbit Osquery" for older versions of the agent.


Open the Terminal App and run the cleanup script below and please run these scripts as two commands (ex. run the first two lines together at once):

sudo launchctl stop com.fleetdm.orbit
sudo launchctl unload /Library/LaunchDaemons/com.fleetdm.orbit.plist

sudo pkill fleet-desktop || true
sudo rm -rf /Library/LaunchDaemons/com.fleetdm.orbit.plist /var/lib/orbit /usr/local/bin/orbit /var/log/orbit /opt/orbit/


Uninstall the package with the corresponding package manager:

  • Ubuntu
sudo apt remove fleet-osquery -y

Was this article helpful?

Have more questions? Submit a request



Article is closed for comments.