SECURITY, CONNECTED / BETA 0.3
Your security workspace.
Machines. Dependencies. A clearer picture.
Illustrative example data. Imported reports stay in this tab. No machines are being monitored here.
01 / Connect a collector
Download the beta tools. Inventory stays local until you enable advisory checks and upload reports to this workspace.
Source archive ↓ · npm package ↓ · Linux collector ↓ · SHA-256 checksums
Node 20.11+ or Linux with Python 3.9+. Review the installation steps. No install scripts run during npm installation.
Your token, shown once
Keep it local. Setup prompts for it without echoing it to your terminal. Only its hash is stored here.
Configure and start
Online checks send package names and versions to OSV. Sync sends report metadata here. Alerts and model calls need separate local configuration.
Active upload tokens
Collector tokens upload reports. A token bound to one host can also poll its approved repair jobs; it cannot approve actions or read workspace reports. Limit: five active tokens, 25 assets.
02 / Assets
INVENTORY03 / Evidence & review
SCOPE MATTERSConnect a collector or import its report to see your first asset.
Local CLI planning configuration ↗
Download a configuration for the local CLI. Your API key stays on your machine. This website calls no models, and plans execute no changes.
zyrasec plan --report report.json --config agent.config.json --output plan.json
Maximum output: 1,200 tokens by default. Review every proposed fix and test compatibility before applying it. Hosted providers charge according to your own account.
04 / Activity & alerts
The central worker emails finding changes, stale collector reports and repair outcomes when SMTP is configured. It continues checking stored inventories while collectors are offline. Your reported observation time and advisory freshness are tracked separately.
Connect a collector to start your activity history.
Your data
Reports are private to your signed-in account. We retain one full report and 50 check summaries per asset, plus the latest 200 workspace alerts. Review notes expire after at most 30 days.
Deleting saved data revokes upload tokens. It does not uninstall collectors or cancel your separate waitlist signup.
05 / Central controls
Repository scans, email, repair approvals and model planning run on your ZyraSec server.