The endpoint agent is a lightweight Windows agent that collects device posture and reports it back to Venvera. Reach it directly at Integrations, Endpoint Agent. Each device that checks in appears in Venvera with its latest posture and heartbeat.
Enrolling a device
On the Endpoint Agent page, generate an enrolment key. The secret is shown once at creation, so copy it then. Keys have the form vv_agent_<prefix>_<secret>.
Run the provided PowerShell install one-liner on the target device. The agent installs as a LocalSystem Windows service and begins heartbeating to Venvera.
The device appears on the Endpoint Agent page and updates its posture on each heartbeat. Each report is authenticated with a per-key HMAC signature, and replayed requests are rejected.
What the agent collects
| Signal | What it reports |
|---|---|
| BitLocker | Disk encryption status |
| Microsoft Defender | Antivirus presence and status |
| Firewall | Windows Firewall state |
| Windows Update | Update status |
| TPM | Trusted Platform Module presence |
| Account hygiene | Local account posture |
To retire a device or rotate credentials, revoke its enrolment key on the Endpoint Agent page. The agent stores raw posture signals and does not auto-map to controls the way the cloud scanners do.