Scan Infrastructure Without Agents

Requesting access does not create an account automatically. Learn how manual approval works for Google users and non-Google users with local password plus MFA.

Download the right collector for Windows, macOS, Linux, ARM, OpenWrt/Entware ARMv7, MIPS, or PowerPC; run a system or directory scan; schedule recurring inventory with cron or Windows Task Scheduler; understand JSONL output, package artifact evidence, and when to skip default SHA-256 file hashes.

Use Groups deliberately: repeatable fleet groups can support drift, while forensic images, M&A bundles, downloads folders, and random uploads should usually be read as software similarity.

Interpret Package Risk, Package Advisories, OSV MAL malicious packages, private-key exposure, crypto-wallet artifacts, and AI prompt-risk findings without mixing them into ordinary NVD/CVE results.

Use vmrun to inject the collector into a guest VM, run a scan, and pull results back to the host — all without SSH or network access.

Use qm guest exec via the QEMU guest agent to run scans inside KVM virtual machines — no SSH keys, no network configuration required.

Push the collector directly into containers with pct push, execute scans with pct exec, and pull results with pct pull.

Loop across every VM and container on a Proxmox node. Automatically detect guest type, inject the collector, scan, and collect all results into a single directory.

Use virt-customize to bake the collector into stopped VM disk images or templates. Optionally trigger a scan on first boot via cloud-init.