Endpoint Controls overview
See AI use on managed devices with the device sensor.
If you don't see this feature in your console, ask your SecureAuth contact to
enable the device_sensor feature flag for your organization.
People run AI agents on their own machines that never go through the gateway, so the gateway never sees them. The device sensor runs on the machines your people use and reports the agents it sees there.
What the sensor reports
The Shadow Agents tab on Agents & NHIs lists the agents that sensors saw running, whether or not they go through the gateway. It shows how the sensor recognised each agent, how many devices it ran on, and when a sensor last saw it. Processes that no catalog signature matched are counted as Unrecognised.
What this section covers
- Install Endpoint Control – generate an installer and enroll a machine.
- Devices – see enrolled machines, check sensor releases, and revoke a device.
Next steps
You now know what the sensor reports and where to find it. Enroll your first machine in Install Endpoint Control.