Symbiosis endpoint agent

One Go binary. Windows, macOS, Linux. Reports host state every 15 minutes to feed CM-6, CM-7, SI-2, SI-3, SI-4, SC-7, SC-28, AC-6, and AC-7 evidence directly into your controls.

Mint an enroll token

Tokens are one-shot and expire in 15 minutes. Org admins only.

Install

Signed binaries are shipping soon. For now, build from source. The agent has zero dependencies outside the Go standard library.

Build
git clone https://github.com/symbiosis-llc/grc-endpoint-agent
cd grc-endpoint-agent
# Linux
GOOS=linux   GOARCH=amd64 go build -o symbiosis-agent ./
# macOS
GOOS=darwin  GOARCH=arm64 go build -o symbiosis-agent ./
# Windows
GOOS=windows GOARCH=amd64 go build -o symbiosis-agent.exe ./
Enroll (bash / zsh)
./symbiosis-agent enroll \
  --token=<paste enroll token> \
  --enroll-url=/api/public/ingest/agent-enroll
# writes /etc/symbiosis-agent/config.json (or %ProgramData% on Windows)
Run as service
# Linux systemd
sudo ./symbiosis-agent install-service --user=root
sudo systemctl enable --now symbiosis-agent

# macOS launchd
sudo ./symbiosis-agent install-service

# Windows service
symbiosis-agent.exe install-service

Full control mapping in the integrations docs.