FLOW · DISCOVERY - Layer 02
Every device in your org: seen and understood, automatically.
Every Mac, Linux, and Windows device in your org: seen, understood, and continuously monitored. The WorkVerge agent auto-registers devices, reports live health signals, and feeds your ITAM and CMDB without any manual updates.
Devices register themselves
Run one command. WorkVerge does the rest.
Live heartbeat
Status updates every 60 seconds.
Platforms supported
3
macOS · Linux · Windows
One install script, all three
THE REALITY
You can't manage what you can't see, and right now, you can't see everything.
Shadow devices, stale spreadsheets, and disappeared laptops are not edge cases. They're the norm when discovery is manual.
"Is this laptop still with Sarah?"
Someone leaves, and the device goes with them, or stays under a desk. Your asset register says it's assigned. Reality says it's been off the network for three months. Without an agent, you'll never know.
Shadow devices that no one knows about
Contractors, BYOD devices, and unboxed hardware from the last procurement batch, they're all running on your network, touching your services, and completely invisible to your IT team.
Audit time becomes panic time
Someone asks for a list of every device in the org with its OS version and installed apps. What was supposed to be a 10-minute export turns into a three-day chase across inboxes, MDM exports, and best guesses.
From zero to full visibility in under five minutes.
No agents to configure, no spreadsheets to update, no manual check-ins. Here's exactly what happens after you run the install command.
Live discovery flow
--token wv_enroll_•••• \\
--server https://app.workverge.ai
✓ Agent installed · service started
WorkVie AI · discovery insight
“Which devices haven't sent a heartbeat in 48 hours?”
3 MacBooks and 1 Linux CI runner are offline. 2 were last seen in Engineering. Want me to open tickets for the owners?
< 2 min
Install time
One command, done
60s
First heartbeat
Live data, immediately
10 min
Full app inventory
Every device, every app
0
Manual updates
Always current
WORKS EVERYWHERE
One command on any operating system.
Whether your team runs Macs, Linux servers, or Windows laptops, the WorkVerge agent installs the same way and reports the same data. Pick your platform below.
macOS
One Terminal command. Runs silently in the background.
Open Terminal, paste one line, and the agent installs itself. It registers as a launch agent under your user account, which means it starts automatically when you log in, runs completely in the background, and never needs a restart or manual launch. Most users never even know it's there.
Install (Terminal)
bash <(curl -sL https://app.workverge.ai/agent/install.sh) \
--token YOUR_ENROLLMENT_TOKEN \
--server https://app.workverge.aiNode.js ≥ 22 required. The script detects it automatically and prompts if missing.
Manage the agent
workverge-agentctl status # check
workverge-agentctl restart # restart
workverge-agentctl uninstall # removeHow it runs
Runs as a launchd user agent (com.workverge.agent). Starts at login, restarts automatically if it crashes.
What gets reported to WorkVerge
All data is sent over outbound HTTPS only; no inbound ports required
Installed apps
/Applications folder + Homebrew (brew list)
Hardware info
system_profiler: model, CPU, RAM, serial
OS version
sw_vers: ProductName, ProductVersion
Chassis type
Inferred from model name (MacBook = laptop, Mac mini = desktop)
Health vitals
CPU %, RAM %, disk used/free, uptime, IPs
Reporting schedule
Every 60s
Heartbeat
CPU, RAM, disk, uptime
Every 10m
App scan
Full installed app list
Every 15s
Commands
Poll for admin tasks
Privacy by design
The agent does not capture keystrokes, screen content, personal files, or browsing history. It only reports hardware specs, OS info, installed apps, and system health metrics.
FLOW · DISCOVERY - Layer 02
Devices register, report, and stay current, without anyone lifting a finger.
The WorkVerge agent is a lightweight background process that runs silently on each device. Once installed, it handles everything: registering the device in your org, sending live health signals, and reporting installed apps: all automatically, all the time.
Zero-touch auto-registration
On first run, the agent fingerprints the device (serial, MAC, hostname) and checks if it exists in WorkVerge. If not, it creates the device record, links it to your org, and files it under the right inventory. No admin input required.
Live health vitals every 60 seconds
CPU load, RAM usage, disk space, uptime, and network IPs are sent to WorkVerge every minute. The fleet dashboard always reflects the live state of every enrolled device, not a snapshot from last week.
Full app inventory every 10 minutes
Installed applications are scanned and reported regularly. On macOS it reads from Applications and Homebrew; on Linux it queries dpkg, rpm, flatpak, and snap; on Windows it reads the Registry uninstall keys.
Remote commands with an audit log
Admins can push commands to any enrolled device from the WorkVerge dashboard. Every command (who ran it, when, and what output it produced) is saved in a tamper-evident audit trail.
Automatic ITAM and CMDB feed
Discovered devices are tagged createdBy: agent-autodiscovery and become first-class Configuration Items. Ownership, relationships, and health scores in your CMDB update automatically as the agent reports in.
Enrolled devices
142
↑ 8 this week
Online now
128
90% alive
Offline
11
Last seen >1h
Never reported
3
Check install
Device fleet
LiveSarah's MacBook Pro M3
WVG-8K2M
Dev Server · ubuntu-prod-01
SRV-4X9R
Marcus's ThinkPad X1
WVG-3P7T
Old MacBook Air (2019)
WVG-1A2B
CI Runner · linux-ci-02
SRV-9L1Q
Selected: Sarah's MacBook Pro M3
CORE CAPABILITIES
Continuous visibility, zero maintenance.
The WorkVerge agent is designed to disappear into the background and keep your fleet data current, forever. No babysitting required.
Zero-touch enrollment
Paste one command on any device and it registers itself in WorkVerge automatically. No forms, no manual entry, no spreadsheets to update. The agent handles everything, even creating the device record if it doesn't already exist.
Live fleet visibility
See every enrolled device on a single dashboard with real-time status: online, offline, or warning. Heartbeats arrive every 60 seconds so you always know what's alive, not what was alive last Tuesday.
Full app inventory
Every 10 minutes, the agent sends a complete list of installed apps. macOS reads from Applications and Homebrew. Linux queries dpkg, rpm, flatpak, and snap. Windows reads the Registry. You always know what's running on what.
Remote commands
Push commands to any device directly from the WorkVerge dashboard. Every command is logged: who ran it, when, and what it returned. Rescan apps, run diagnostics, or execute admin tasks without a separate RMM tool.
Automatic ITAM and CMDB feed
Every device the agent discovers becomes a first-class asset in your ITAM inventory and a Configuration Item in your CMDB. Relationships, ownership, and health scores update automatically as the agent checks in.
Secure by design
Enrollment tokens are hashed (SHA-256) and expire on schedule. Devices communicate via their own JWT, not a shared key. The agent never opens inbound ports and collects only operational data, never keystrokes or personal files.
SECURITY
Secure by Default
WorkVerge is built with security at every layer, from access controls and audit trails to data encryption and compliance tooling.
ISO 27001 AlignedFrameworks & regulations
SOC 2
GDPR
27001
Plus enterprise controls including RBAC, SSO, and exportable audit logs.
Role-based access control for least-privilege permissions.
Asset data encrypted in transit and at rest.
Detailed audit logs with export support.
SAML and SSO support for seamless authentication.
Multi-step approval workflows for sensitive changes.
Configurable API scopes per integration.
Data residency and sovereignty controls.
Compliance with ISO 27001 framework.
Clear IT operations start with one step.
Most teams start with ITAM and have full asset visibility within two weeks. AI surfaces the gaps, the risks, and what to prioritise from day one.