Skip to content

Introducing the Coro Agent

The Coro Agent provides protection for Windows and macOS endpoint devices.

The Coro Agent communicates with the Coro Backend service by providing monitoring data from devices and receiving instructions in cases where automated remediation is not enforced. The Coro Agent is autonomous and functions independently of whether or not connectivity to the Coro service is available at the time.

The Coro console (Frontend) connects to the Backend via a private API and controls information and commands transferred to and from cloud apps and Coro Agents to the Backend. These three components form the basis of the Coro cybersecurity platform.

Endpoint Agent Architecture

The Coro Agent operates similarly to other antivirus applications: it compares the hashes of downloaded files to public databases of previously checked viruses; if they match, Coro quarantines the file. Additionally, the Coro Agent can identify system vulnerabilities. For example, it verifies that the computer is protected by a password and that Developer Mode remains disabled.

The importance of device protection is paramount. For instance, compliance requirements frequently stipulate that all computer drives (internal and external) used by the organization must be encrypted. Through policy definition in the Coro Console, the Coro Agent can help organizations to monitor, protect, and ensure compliance for the endpoint devices used by their employees.

To learn more about deploying the Coro Agent, see the following guides: