Agent 0.3.0

Agent 0.3.0 gives IT teams and MSPs better evidence for Linux vulnerability decisions and endpoint policy delivery. These improvements are based on evaluator feedback.

Highlights

• Linux vulnerability evidence. Distribution and package details let Outpost recognize distribution backports when assessing vulnerabilities.
• Script policy confirmation. Verify that an endpoint received the script settings you intended.
• Host firewall visibility. See which firewall answered on Linux, macOS, and BSD endpoints.

Added

Inventory and security status

• Reports the Linux distribution, release, package manager, and native source package version for distribution-aware vulnerability checks. See Vulnerabilities.
• Reports the detected host firewall: nftables, ufw, firewalld, iptables, pf, ipfw, or Application Firewall. When no tooling answers, the console shows Not reported. This assesses only the endpoint’s own firewall, not upstream network protection. See Endpoint security.

Policy evidence

Reports receipt of script settings so Effective config can show Applied, Pending, or Not reported under Agent (script environment). See Script delivery.

Security

Scripts and interactive terminals

• The agent receives and enforces script settings. When scripts are off, it refuses one-off, scheduled, library, and AI or MCP script runs.
• The separate Remote shell policy blocks interactive terminal sessions, including AI and MCP terminal requests. Outpost and the agent enforce it. To block both scripts and terminals, turn off both settings.

See Scripting and Terminal access policy.

Upgrade notes

Use with Depot 0.6.0. Follow Agent updates to check for or install the update. The agent service restarts during an update, and the endpoint briefly appears offline.

After the endpoint reports its inventory, vulnerability findings refresh on the next scan. Check Profiles > Effective config for confirmation of script settings.