| OS | Versions | Architecture |
|---|
| Windows | 10, 11, Server 2019, Server 2022 | x86-64 |
| macOS | 12 (Monterey) and later | x86-64, Apple Silicon |
| Linux | Ubuntu 20.04+, Debian 11+, RHEL 8+, Fedora 37+ | x86-64 |
| Resource | Minimum | Recommended |
|---|
| CPU | Any dual-core (2010+) | Any — agent uses <0.5% at idle |
| RAM | 256 MB free | 512 MB free |
| Disk | 100 MB | 500 MB (for quarantine store) |
| Port | Protocol | Purpose |
|---|
| 50051 | TCP (gRPC) | Agent → Backend telemetry |
| 443 | TCP (HTTPS) | Agent update check (optional) |
The agent does not require any inbound ports. No firewall rules need to be opened on endpoints.
The backend can run on any x86-64 Linux host. Recommended minimum spec for production:
| Resource | Minimum | Recommended (500 endpoints) |
|---|
| CPU | 2 vCPU | 4 vCPU |
| RAM | 4 GB | 8 GB |
| Disk | 20 GB SSD | 100 GB SSD |
| OS | Ubuntu 22.04 LTS | Ubuntu 22.04 LTS |
A single Hetzner CX22 (~$5/month) or AWS t3.medium comfortably serves a 500-endpoint deployment.
| Port | Protocol | Purpose |
|---|
| 8080 | TCP (HTTP/HTTPS) | REST API for console |
| 50051 | TCP (gRPC) | Agent connections |
| 8000 | TCP | SurrealDB (localhost only) |
| Dependency | Version | Notes |
|---|
| SurrealDB | 2.x | Installed automatically via Docker Compose |
| Docker | 24+ | For containerized deployment |
| Docker Compose | v2 | For containerized deployment |
The Flutter desktop console runs natively on the IT administrator’s workstation.
| OS | Minimum version |
|---|
| Windows | 10 1903+ (64-bit) |
| macOS | 12 (Monterey) |
| Linux | Ubuntu 20.04+, any X11/Wayland desktop |
The console does not need to be installed on managed endpoints — only on the IT admin’s machine.
| Connection | Protocol | Required? |
|---|
| Endpoint → Backend (gRPC port 50051) | TCP | Yes |
| Console → Backend (HTTP port 8080) | TCP | Yes |
| Backend → SMTP server | TCP 587 | Only if email alerts configured |
| Backend → Splunk/Elastic/Sentinel | TCP 443/8088 | Only if SIEM configured |
| Backend → Jira | TCP 443 | Only if Jira integration configured |
No traffic leaves your network to Halden Technologies infrastructure.
