Skip to main content

Install the Cybrium Agent

The Cybrium Agent runs on macOS, Linux, and Windows — the same binary orchestrates sensors, registers with the tenant, and streams telemetry back to your Cybrium tenant regardless of host OS.

All published binaries are signed:

  • Windows — Authenticode-signed by Cybrium Inc via Azure Trusted Signing. SmartScreen and Defender both accept the cert without warning.
  • macOS — Apple Developer ID notarised and stapled. Gatekeeper opens the binary cleanly on first launch.
  • Linux — Sigstore-signed (cosign keyless) with provenance attestation.

macOS / Linux — Homebrew​

brew tap cybrium-ai/cli
brew install cybrium-agent

Windows — Scoop​

scoop bucket add cybrium https://github.com/cybrium-ai/scoop-bucket
scoop install cybrium-agent

Windows — Winget​

winget install Cybrium.Agent

Windows — Chocolatey​

choco install cybrium-agent

One-liner install​

macOS / Linux​

curl -fsSL https://cybrium.ai/install.sh | bash -s -- cybrium-agent

Windows — PowerShell​

irm https://cybrium.ai/install.ps1 | iex

The PowerShell installer downloads the signed .exe, places it under %LOCALAPPDATA%\Programs\Cybrium\, and adds the directory to your user PATH. Open a new terminal afterwards so the updated PATH takes effect.

Pre-built binaries​

Download from GitHub Releases.

PlatformArchitectureBinary
macOSApple Silicon (arm64)cybrium-agent-darwin-arm64
macOSIntel (x86_64)cybrium-agent-darwin-amd64
Linuxx86_64cybrium-agent-linux-amd64
Linuxarm64cybrium-agent-linux-arm64
Windowsx86_64cybrium-agent-windows-amd64.exe
Windowsarm64cybrium-agent-windows-arm64.exe
WindowsMSI installercybrium-agent-windows-amd64.msi

Linux / macOS example​

curl -L https://github.com/cybrium-ai/cybrium-agent/releases/latest/download/cybrium-agent-linux-amd64 -o cybrium-agent
chmod +x cybrium-agent
sudo mv cybrium-agent /usr/local/bin/

Windows example (PowerShell)​

# Direct .exe — drop into a directory on your PATH
$dest = "$env:LOCALAPPDATA\Programs\Cybrium"
New-Item -ItemType Directory -Force -Path $dest | Out-Null
Invoke-WebRequest `
  -Uri "https://github.com/cybrium-ai/cybrium-agent/releases/latest/download/cybrium-agent-windows-amd64.exe" `
  -OutFile "$dest\cybrium-agent.exe"
[Environment]::SetEnvironmentVariable("Path", "$([Environment]::GetEnvironmentVariable('Path','User'));$dest", "User")

Or download and run the MSI for a system-wide install with an uninstaller entry in Programs and Features:

Invoke-WebRequest `
  -Uri "https://github.com/cybrium-ai/cybrium-agent/releases/latest/download/cybrium-agent-windows-amd64.msi" `
  -OutFile "$env:TEMP\cybrium-agent.msi"
msiexec /i "$env:TEMP\cybrium-agent.msi" /qn

Verifying the Windows signature​

Get-AuthenticodeSignature .\cybrium-agent.exe

Expected: Status = Valid, SignerCertificate.Subject = CN=Cybrium Inc, ....

Build from source​

Requires Rust 1.75+. Cross-compilation supported for all three platforms.

git clone https://github.com/cybrium-ai/cybrium-agent.git
cd cybrium-agent
cargo build --release
# Binary at target/release/cybrium-agent (or cybrium-agent.exe on Windows)

Cross-compile to Windows from macOS / Linux​

rustup target add x86_64-pc-windows-msvc
cargo install cargo-xwin
cargo xwin build --release --target x86_64-pc-windows-msvc
# Binary at target/x86_64-pc-windows-msvc/release/cybrium-agent.exe

Install sensors​

The agent orchestrates sensors — install the ones you need:

macOS / Linux — Homebrew​

# All sensors
brew install cysense cyguard cyprobe cyweb cyscan cymail

# Hospital deployment (minimum)
brew install cysense cyguard cyprobe

Windows — Scoop​

# All sensors
scoop install cysense cyguard cyprobe cyweb cyscan cymail

# Hospital deployment (minimum)
scoop install cysense cyguard cyprobe

Windows — Winget​

winget install Cybrium.Cysense
winget install Cybrium.Cyguard
winget install Cybrium.Cyprobe
winget install Cybrium.Cyweb
winget install Cybrium.Cyscan
winget install Cybrium.Cymail

The agent auto-discovers which sensors are available on the system, regardless of how they were installed.

Run as a service​

The agent ships service-manager integrations so it starts on boot and restarts on failure.

macOS — launchd​

cybrium-agent service install
sudo launchctl load /Library/LaunchDaemons/ai.cybrium.agent.plist

Linux — systemd​

sudo cybrium-agent service install
sudo systemctl enable --now cybrium-agent

Windows — Service Control Manager​

Run an elevated PowerShell prompt (Administrator):

cybrium-agent service install
Start-Service CybriumAgent
Set-Service CybriumAgent -StartupType Automatic

The service runs under NT AUTHORITY\NetworkService by default; switch to LocalSystem only if a sensor explicitly needs it.

Verify installation​

cybrium-agent version

Windows (PowerShell):

cybrium-agent.exe version

Expected output includes the version number, build SHA, target platform, and signature subject.

Next step​

Once installed, activate the agent using the device-flow code from your Cybrium tenant.