Devices and RevoAgent

A device is a computer or server running RevoAgent. Devices belong to one customer. Everything external (domains, websites, mail servers, public IP addresses) is under the customer's Attack surface instead, and Microsoft 365 users are under Identity.

Devices exists in both modes: in the portfolio it lists every customer's devices with a customer column; inside a customer it lists only theirs.

Platforms

New agent releases reach the beta release channel first and stable later. Not every platform has a stable release yet: at the time of writing, stable covers Windows x64 and Linux x64, while Windows on Arm, Linux ARM64 and macOS are on beta only. A device on those platforms needs the beta channel, otherwise there is no release to offer it. Settings → Agent updates shows the current stable and beta release for each platform. See Release channels.

What the agent does

• Reports on its own every few hours (6 by default): inventory, installed software, missing updates, protection, encryption and configuration checks. Laptops that are offline when an assessment runs stay current.
• Collects security telemetry (agent 0.3.0 and later): Microsoft Defender status and detections, selected Windows event log events, Linux SSH and sudo activity. These become Alerts.
• Runs internal assessments you start, including optional Active Directory checks and authorized network discovery. See Internal assessments.
• Installs updates and restarts inside maintenance windows when patch management is on for the customer (agent 0.4.0 and later). See How patch management works.
• Upgrades Windows to the version you approve (agent 0.6.0 and later). See Windows version upgrades.
• Updates itself to new releases signed by Revo, and rolls back if the new version can't check in.

What it never does, by design:

• run commands, scripts, URLs or installers sent by the server: every operation is a fixed, signed job type;
• collect credentials or passwords;
• change update sources, local policy or other software's configuration;
• install new products the server picks: it only updates what the device's own update sources offer.

The agent only makes outbound HTTPS connections. It needs no inbound firewall rule. Proxies aren't supported: the device needs direct outbound HTTPS to Revo.

The device list

The list shows each device's status, patch state, protection, encryption, pending restart, OS support, last seen time and agent version.

• Tiles and quick filters at the top cover online and offline devices, the average device score, patch status, restart pending, OS support, protection and encryption. Filters are kept in the address bar, so you can share a filtered list.
• Score shows each device's grade against its customer's baseline; click it for what's affecting it. See The device score.
• Columns chooses the columns, and Show full hostnames lists devices by full hostname instead of name (see Device names). Export CSV downloads exactly the filtered list.
• Agent shows each device's version and Update available when a newer release exists on its channel. Devices on the beta channel carry a small beta pill.
• Select devices (or select all matching) for bulk actions: scan, install, restart, move, update the agent and more. See Device actions.
• Customers linked to Syncro also show Syncro assets under the list: Syncro's computers matched to Revo devices by hostname, so computers without the agent stand out.

Open a device for its details: see Reading a device.

Get started

1. Install the agent: Windows, macOS or Linux.
2. Check the device appears in Devices with a recent last seen time.
3. Decide its release channel and, if you want Revo to install updates, turn on patch management for the customer.