Install a Lens collector

Before you begin

Create or open the relevant assessment, then select Add Collector.
Choose a host that can reach the approved targets and Lens over HTTPS. Keep the host and downloaded package under your control.
For Network assessments, add least-privileged device credentials in Lens and define the approved target ranges before starting collection.

Treat the download as a secret. Each collector package contains a single-use registration credential for one collector. It expires after 24 hours. Do not email, share, or reuse the package; download a new one from Lens if it expires.

Choose the right download

Lens offers a managed collector package for Linux or Windows. Choose it for an ongoing collector, including Network assessments, Application Discovery, and internal Cyber work that will be scheduled or monitored.

For a one-time internal Cyber assessment, Lens also offers a standalone assessment download. It is intended for a single run on a trusted host and does not install the persistent collector services.

Install a managed collector

Linux

Download the Linux collector bundle from Lens and copy it to the target host. The bundle supports Debian/Ubuntu and RHEL-compatible systems on amd64 and arm64.

tar -xzf lens-collector-*-linux.tar.gz
cd lens-collector-*-linux
sudo ./install-collector.sh

The installer selects the matching native package, creates the dedicated lens-agent service account, registers the collector, and starts its health, heartbeat, and scheduled-job services. Confirm that it is running:

sudo systemctl status lens-agent-poll-health.service

Windows

Download the Windows collector and run LensCollectorService.exe on the target host. The download already contains its registration credential. Allow the administrator prompt when Windows asks to install the collector services; the installer registers the collector and starts the default health and heartbeat services.

SNMP trap receiving is optional on both platforms. Enable it only after choosing an approved listener port and source allowlist.

Run a one-time internal Cyber assessment

From the Internal/Private section of a Cyber assessment, download the Linux or Windows assessment package. It also carries its registration credential internally, so there is no token or install command to copy from Lens.

Linux standalone assessment

tar -xzf lens-agent-linux-assessment.tar.gz
cd lens-agent-linux-assessment
./install-assessment.sh

The installer registers the assessment collector and prints the command for opening its local setup UI.

Windows standalone assessment

Run the downloaded LensAssessment.exe. It registers the assessment collector and opens the local setup experience.

Configure and start the job

Return to the assessment in Lens after installation and confirm the collector is active.
For a Network assessment, verify the approved target ranges and least-privileged scan credentials, then start collection.
For internal Cyber or Application Discovery, verify the displayed authorized targets and start the scan from the collector setup UI or the assessment.
Review the resulting inventory, findings, topology, or discovered services in Lens.

Only assess networks, hosts, and services you are authorized to assess. If the collector does not register, its package has probably expired or already been used; create a new collector or reissue its package in Lens.

Next, review the device configuration overview and choose the matching manufacturer guide before adding device access.