3 ms·
The Drata agent is a lightweight osquery agent that is read only that reads things like - screen saver timeout, auto-updates turned on, is AV software installed
by neonnomad 5y ago
The Drata agent is a lightweight osquery agent that is read only that reads things like - screen saver timeout, auto-updates turned on, is AV software installed, etc. We collect that data to show the device is compliant with the companies policies and the compliance frameworks they have agreed to. The company this person contracts with requires the agent be installed to monitor compliance for all devices, employee and contractor. Most companies these days require devices meet xyz requirements around patching, av/edr, etc. if they hold company data.
It never "key logs" anything or collects any of that type of information.
Our agent has been third party security validated and we are happy to share the report with any prospect/customer as well as the configuration.
Source: Work for Drata as the CISO
- ww520 5y agoDoes your software run as a Windows service? Is it installed as the System user or Local Admin user? Does it auto update over network? It’s just one update away from adding key logging. Put money on your claim. Put up a surety bond or insurance for users’ data breach. All the security audits won’t beat putting your own financial stake on the table.
- illud_tempus 5y agoHow does the agent know what user it is monitoring? What other kinds of personal information does it process or collect, locally or in it's server endpoint? An external IP address is personal information. A UUID identifying a block device is personal information. A hostname is personal information. Anything in "/usr/home" is personal information.