Add-on catalog
Native add-ons are compiled Go or Rust binaries the agent supervises out-of-process. Every add-on below ships as a signed OCI artifact verified against the agent release trust root.
Edge per-series anomaly detection. Analyzes the agent's locally collected sysmon / SNMP / ICMP metrics on-host and ships verdicts instead of every raw point, removing the central anomaly fan-out for agent-sourced series.
linux/amd64
Root-owned local exposure scanner for developer and package-manager artifacts. Runs on a systemd timer and writes sanitized findings to the Bumblebee spool for non-root agent ingest.
linux/amd64 · linux/arm64
Passive host fingerprinting (p0f/JA4), DPI, eBPF process attribution, and flow visibility. Capability-granted long-running daemon delivered as a signed pushed-artifact add-on, carved out of the base agent.
linux/amd64
Edge OpenTelemetry collector for ServiceRadar. Accepts OTLP traces, logs, and metrics on local gRPC/HTTP listeners. The default required install spools them durably on disk and relays them to the supervising agent over the acked otlp-relay:v1 stream; sites with a local NATS leaf can explicitly switch to direct JetStream leaf publishing.
linux/amd64
Local PowerDNS protobuf receiver that maps RPZ policy hits to OCSF DNS Activity events and forwards them through the authenticated ServiceRadar agent path.
linux/amd64
Per-session RDP desktop helper used by the compiled-in remote-access feature. Staged as a signed pushed-artifact add-on and invoked on demand; the agent does not run or supervise it as a long-lived process.
linux/amd64
OSV ScaLibr-backed endpoint software inventory scanner that emits ServiceRadar endpoint inventory SBOM and generic scanner contract metadata.
linux/amd64 · linux/arm64
Node-local CRI/container workload metadata collector for Kubernetes pod, namespace, container, image, and runtime identity enrichment.
linux/amd64
We can't find the internet
Attempting to reconnect
Something went wrong!
Attempting to reconnect
