System Blueprints

Visual Architecture

A self-hosted endpoint telemetry pipeline with local storage, managed entitlement, native updates, and SIEM-style alert triage.

terminal

Go Agent

Edge Endpoint

HTTPS/JSONarrow_forward
HTTPS/JSONarrow_downward
settings_input_component

Secure Local Server

Logic & Orchestration

dashboard

React Dashboard

swap_horiz
swap_vert
database

Local Event Store

Persistent Evidence

shield

The agent collects connection, software inventory, and aggregate host health metadata only — timestamps, IPs, ports, protocols, process names, PIDs, installed package names/versions, and CPU/memory/disk/network counters. No packet payloads, browser headers, cookies, files, command lines, or decrypted TLS content are captured.

Deployment Options

boxControlled environments

Docker Compose

Available for operator-managed deployments and internal environments that need Compose-based control.

  • check_circle Operator-managed storage and service isolation
  • check_circle Reverse proxy compatible deployment model
  • check_circle HTTPS entrypoint on port 52443
View Deployment Docs
rocket_launchCustomer default

Native Mode

The public macOS installer provisions the native server, local TLS, menubar helper, and system LaunchDaemon service.

  • check_circle Built-in local event store
  • check_circle Installer provisions and starts the service
  • check_circle macOS Menu Bar Support
  • check_circle Logout/reboot persistent service model
Setup Native

Platform Support

Agent availability across architectures

info
OS / KernelArchitectureStatusFeatures
Linuxamd64Full SupportConnection collection, web telemetry, process attribution, DNS/IP enrichment, software inventory, system metrics
Linuxarm64Full SupportConnection collection, web telemetry, process attribution, DNS/IP enrichment, software inventory, system metrics
macOSarm64Full SupportConnection collection, web telemetry, process attribution, DNS/IP enrichment, local software inventory, system metrics
macOSamd64PlannedCustomer package is not published yet; current macOS native packages target arm64
Windowsamd64Metrics PreviewHeartbeat and aggregate system metrics are implemented; customer installer and connection collection are tracked for a later platform phase

Get Running in 15 Minutes

Native Mode
01. Install Server
$Open account → Request access
$Download Server Installer
02. Open Console
$https://localhost:52443
# Native server starts automatically
03. Triage Alerts
$# Alerts → Open queue
$Assign owner → inspect evidence
>Mark true positive or false positive

For Docker deployment, see the Deployment Guide.

System Requirements

OmniSight is engineered for extreme efficiency. The agent's footprint is negligible, allowing for deployment on even the smallest edge nodes.

Server Core

Native: 512 MB RAM, 500 MB disk minimum
Docker: 1 GB RAM, 2 GB disk minimum

Go Agent

Lightweight foreground binary
Exact RAM and CPU use depend on endpoint activity

Connectivity

HTTPS outbound to server
Port 52443 (native and Docker)

Browser

Current Chrome, Firefox, or Safari
Use a modern browser with HTTPS enabled