Help Center
Go back to application
Help Center
Go back to application
Platform Terms GlossaryContacting Support and Reporting Bugs
Task Management
Task Management explained Creating Tasks Setting up Task NotificationsGiving permissions to team members
Organization
Working together in KertosInviting UsersCreating rolesAssigning System AccessCreating Departments and Assigning Users
Integrations
Discovery
Tasks
Device Management
Microsoft IntuneHardware Compliance Score Synckertos Device Monitor
Human Resource Information Systems
Inventory
Inventorization of vendorsInventorization of systemsInventorization of assetsEU AI Act: Inventorization of AI use cases
Risks
Managing risks
Trust Center
Setting up your trust center
Incidents
Reporting incidents
KAIA
KAIA explainedPrinciples of AI at Kertos
Interacting with KAIA
Compliance
Frameworks explainedManaging & implementing controlsCreating & managing policiesCompleting & assigning trainingsGuidanceDetermining Control Applicability
Privacy Management
Creating a RoPACreating TOMsCreating DPIAs
Data Subject Requests
API Reference
Ingress API Docs for DSRs Webhook API Docs for DSRs
Auto Checks
Auto Checks explainedAuto Checks: AWS Auto Checks: GCPAuto Checks: AzureEnabling Auto Checks by Reconfiguring the Azure IntegrationEnabling Auto Checks by Reconfiguring the GCP IntegrationEnabling Auto Checks by Reconfiguring the AWS Integration
AWS Auto Checks Detailed Explanations
Azure Auto Checks Detailed Explanations

kertos Device Monitor

What is the kertos device monitor?

The kertos device monitor helps your company keep laptops and desktops compliant with security requirements. It collects key, non-sensitive device information and shows you whether each device meets your company’s standards. It’s designed to be simple for employees and practical for admins.

Key benefits for your company

  • Save time by avoiding manual asset updates
  • See compliance status per device and per user at a glance
  • Support common standards like ISO 27001 and SOC 2 with clear, basic checks
  • Keep data private: the agent does not read sensitive information like passwords, emails, or browsing history

How to set it up

1) Admin: Enable the kertos device monitor

  • Go to Integrations in Kertos or to the tile on the dashboard
  • Select kertos device monitor
  • Download the installer for your operating system
  • Copy your organization-wide install key
    • The key is also available in the dashboard link for users

Note: If your company uses an MDM integration for devices, downloading the kertos device monitor from Kertos may be disabled. In that case, manage devices through your MDM.

2) Distribute to employees

  • Once the hardware is enabled by admin, each user will be able to download the agent
  • Users can find the download directly on their Kertos dashboard

3) Employee: Install the agent

  • Run the installer for macOS, Windows, or Linux
  • When prompted, paste the provided key
  • The agent will finish setup in seconds and start checks automatically

How it works after installation

What the agent checks

The agent performs lightweight, read-only checks and syncs results to Kertos approximately every 1.5 hours. Typical checks include:

  • Device owner and device ID
  • Operating system version
  • Disk encryption enabled
  • Antivirus installed
  • Password manager installed
  • Screen lock enabled after a reasonable timeout
  • Last updated or synchronized timestamp

The software updates itself automatically when a new version is released.

Where you see results in Kertos

  • Assets page
    • Each device appears as a supporting asset with source “HW Agent”
    • A “Compliance Status” column shows whether the device is Compliant, Non‑Compliant, or Not Applicable
    • Sort or filter by status to focus on devices needing attention
    • The device details view lists each check and the most recent sync time
  • Users page
    • Shows the device held by each user and its compliance status
    • Clicking a device opens the device’s asset entry

Compliance statuses

  • Compliant: All checks pass
  • Non‑Compliant: At least one check fails
  • Not Applicable: No connection yet or the agent is not reachable

Privacy and security

  • Read‑only by design
  • Does not collect sensitive content like passwords, emails, or browsing history
  • Intended to minimize risk while enabling practical compliance monitoring

Uninstalling the kertos device monitor

If you need to remove the agent from a device:

On the device

  • macOS: Quit the agent if running, then move the app to Trash or use the provided uninstaller if included
  • Windows: Open Apps & Features, find the agent, and select Uninstall
  • Linux: Use your package manager to remove the installed package

In Kertos

  • No extra steps are required to remove the device entry, but note:
    • The device’s status may change to Not Applicable once the agent stops syncing
    • If you want to fully remove a device record, delete the asset in Kertos. If the asset is tracked by the agent, Kertos will remind you about the sync connection before deletion

Reassigning a device

  • If a device changes hands, uninstall the agent or install it again using the new user’s key so the device associates with the correct user

Troubleshooting basics

  • I installed the agent but do not see my device yet
    • Wait a few minutes. Syncs happen roughly every 1.5 hours, and the first checks are quick
    • Ensure you used the correct key during installation
  • My device shows as "Not Applicable"
    • The agent might be offline or not installed, or uninstalled. Reinstall with your key and ensure the device is online
  • A check shows as failing
    • Open the device’s asset page to see which check failed and what to fix, for example enabling disk encryption or screen lock

If you need more help, contact kertos support.

Was this article helpful?

Powered by Product Fruits