Dashboard guide
Agents and hosts
The Agents list
One row per host with an agent:
| Column | Meaning |
|---|---|
| status | Online or offline. |
| Host | Host name. |
| OS | Operating system and version. |
| State | active, pending (waiting for approval) or revoked. |
| Packages | Number of installed packages. |
| Covered | Share of the packages for which SEK Systems has an authoritative vulnerability source. |
| Risk | The host's risk level. |
| Open CVEs, Max score | Open vulnerabilities and the highest score on this host. |
| Roles | Extra roles: probe, relay, connector. |
| Version | Agent version. |
| Last seen | Last contact. |
Filters: per distro, and status Active (online + offline), Online, Offline, Pending, Revoked.
Pending agents: a notice "N agent(s) waiting for approval" appears when hosts enrolled without auto-approve. They already report their inventory, but receive no jobs until an owner or admin approves them.
Add agent opens the installation wizard; see Install on Linux and Install on Windows.
The host detail
Click a host. At the top are the actions:
- Create plan…: a remediation plan for this host (operator, admin, owner).
- Approve agent: for a pending host (admin, owner). It becomes active and can receive signed jobs, always within its local policy.
Tabs
| Tab | Content |
|---|---|
| Summary | Risk level, host facts, identity, exposure, coverage, health checks, agent program, roles. |
| Software (third-party) | Windows only: applications outside Windows itself. |
| Packages | All installed packages with version, source and repository. |
| Services | Services and their state, the program behind them, the package it comes from, and the user it runs as. |
| Listeners | Which program listens on which address and port, and for whom it is reachable. |
| Languages & containers | Language packages (for example npm, PyPI, Maven, Go modules) and container images. |
| Hardening | Configuration checks and benchmarks, with Fix all; see Hardening. |
| Local policy | The local policy this host reports. |
| Findings | The open findings of this host. |
| Jobs | Every job this host received, with its result. |
Summary
Risk level, with the reasons that put the host there. On Windows this also shows a missing cumulative update.
Host: status, operating system, kernel or build, Support (whether the operating system version still gets security updates, or is end of life), whether snapshots before a change are possible, whether a reboot is required, and the profile.
Identity: how the agent's key is stored (hardware-bound with the TPM, or protected files), the credential serial, when it enrolled, tamper flags (for example a changed program or loosened folder rights), whether jobs are paused, and the TLS details of the connection.
Exposure:
- the host firewall and, if present, the firewall manager (for example CSF, ufw, firewalld);
- the addresses of the network interfaces;
- the listening services, counted as allowed, conditional, undetermined and measured open.
When the firewall evaluation and a real measurement disagree, the measurement wins, and the page says "firewall evaluation disagrees with measurement". See Attack surface.
Coverage: the share of packages SEK Systems can assess on this host. Packages without an authoritative source never produce findings, so low coverage means blind spots.
Health checks: typed checks that the agent runs before and after every change on this host:
| Type | Checks |
|---|---|
| HTTP | A local URL answers with the expected status. |
| TCP | A local port accepts connections. |
| Service | A service is running. |
Click Add check to add one. Checks only test the host itself (no other systems), at most 10 per job. If a check fails after a change, the agent rolls the change back where possible; see Remediation flow.
Agent program: version, checksum and update status. If this host cannot update itself, it says why, for example "installed without supervisor — rerun the installer"; see Agent problems.
Roles: promote the host to relay or probe (the host must allow it in its local policy).
Revoke an agent
At the bottom of the host detail: Revoke agent, for a decommissioned host, a duplicate registration or a suspected compromise. Enter a reason, click Revoke…, type the host name and confirm with your security key (owner or admin). The credentials are revoked, the session is closed and open jobs are cancelled. This cannot be undone.