Installing the NISSI Agent on Your Devices

devicesReviewed Mar 30, 2026windowsdeviceagentinstallation

Installing the NISSI Agent on Your Devices

The NISSI Endpoint Agent is a cross-platform Python agent that monitors processes, network activity, and DNS queries, then reports telemetry to NISSI Command Center.

What the Agent Does

Detection Capabilities:

  • Behavioral process analysis (heuristics)
  • DNS monitoring (passive, no interception)
  • YARA file scanning (trigger-based)
  • Network reputation analysis
  • CPU/Memory anomaly detection

Remote Actions (from Command Center):

  • Kill suspicious processes
  • Network isolation (requires admin rights)
  • Remote reboot/shutdown
  • Trigger file scans
  • Real-time telemetry streaming

Supported Platforms

The current Python Agent is production-ready and works on:

  • Windows 10, 11, Server 2019+
  • macOS (Monterey, Ventura, Sonoma)
  • Linux (Ubuntu, Debian, RHEL)

Native agents for Windows (C++), macOS (Swift/Objective-C), and Linux (Rust) are currently in development with kernel-level protection capabilities.

Installation Steps

1. Get Your Device ID

  1. In NISSI Command Center, go to Devices in the sidebar
  2. Click Add a Device
  3. Copy your Device ID — you'll need it below

2. Install Python Dependencies

pip install psutil requests yara-python scapy

Optional (for C-level performance):

pip install cython

3. Download the Agent

  1. In Command Center, click AgentDownload in the sidebar (or click Download Agent from the Dashboard)
  2. Click Download Python Agent (nissi-agent.py)

4. Configure and Run

export NISSI_DEVICE_ID="your-device-id"
export NISSI_API_KEY="your-api-key"
python3 nissi-agent.py

The agent will start monitoring your system immediately and report to NISSI every 60 seconds. You can verify it's working by checking your device status in Command Center under Devices.

Mobile Device Enrollment

For mobile endpoint protection, visit agent.nissi.systems on the device:

  1. Enter a Device Name (e.g., "My Android Phone")
  2. Enter your Work Email
  3. Tap Enroll & Protect Device

The mobile agent provides: real-time threat detection, AI-powered analysis, remote security commands, and encrypted telemetry.

Verifying Your Device is Active

After the agent starts, go to Devices in Command Center. Your device should appear in the list with an active status. DNS activity will begin appearing in DNS Query Log once the agent starts reporting.

Need Help?

Contact support or use the AI Assistant below.

Was this article helpful?