Agent Trust
Observe-only runtime agent
Customer infosec review before installing the Laviq agent.
What the agent does
The Laviq agent observes cryptographic function calls in running processes on Linux using eBPF.
What the agent does not do
- Does not modify any monitored process.
- Does not write payload data to disk on the monitored machine.
- Does not intercept payload content or memory dumps.
- Does not transmit encryption keys or plaintext payloads.
Data that leaves the machine
Structured JSON metadata only, including:
- algorithm names
- library paths
- function names
- process names
No payload data and no encryption keys are sent.
Requirements
- Linux kernel 5.10+
Uninstall
systemctl stop laviq-agent && systemctl disable laviq-agent