Supported technologies
Everything the agent runs on and everything it knows how to monitor, on one page. Each area links to its detailed page, and every metric behind these rows is listed in the metrics reference.
Operating systems
One static binary per platform, amd64 and arm64, installed by the same one-liner
everywhere. See Installation.
| Platform | Covered | Notes |
|---|---|---|
| Debian, Ubuntu | yes | apt inventory and patch state. |
| RHEL, Rocky, AlmaLinux, CentOS Stream | yes | rpm inventory, dnf patch state, local CVE counts. |
| Fedora | yes | dnf5 patch state. |
| openSUSE, SLES | yes | zypper patch state. |
| Alpine | yes | musl build, apk inventory, OpenRC service. |
| Devuan and other sysvinit systems | yes | No systemd required, init-aware service and self-update. |
| Windows (Server and desktop) | yes | Native service (SCM), Event Log, IIS, MSSQL, Hyper-V. |
| macOS | yes | Intel and Apple Silicon, launchd daemon. |
Any other mainstream Linux with systemd, OpenRC or sysvinit is expected to work: host
metrics need only /proc, and discovery understands dpkg, rpm and apk databases.
Web servers and websites
| Technology | Covered | Notes |
|---|---|---|
| nginx | yes | Per-site checks, SSL, DNS liveness, domain lifecycle from nginx -T. |
| Apache httpd | yes | Both Debian-family apache2 and RHEL-family httpd layouts. |
| IIS | yes | Sites, app pools, worker processes; sites are the same billing unit. |
| WordPress | yes | Detected per site; drives the WP-aware APM attribution. |
Sites are discovered from the web server's real configuration, so non-standard layouts are found rather than assumed. See Websites and domains.
Services
The signed catalog today, by category. New services are added server-side, with no agent update. See Service catalog; metric lists are in the reference.
| Category | Covered today |
|---|---|
| Databases, search, analytics | MySQL, MariaDB, PostgreSQL, Redis, MongoDB, MSSQL (default and named instances), Elasticsearch, ClickHouse |
| Postfix, Dovecot, Exim, Proxmox Mail Gateway | |
| DNS | BIND, PowerDNS, Unbound |
| Queues and brokers | RabbitMQ, Kafka, NATS |
| Load balancers and proxies | HAProxy, Varnish, Traefik, keepalived |
| Virtualization | Proxmox VE (single nodes and clusters: quorum, per-node guests, migrations and backups as events), KVM/libvirt, Hyper-V |
| Replicated storage | DRBD (resources, devices, connections, out-of-sync and stalled resyncs), LINSTOR (nodes, storage pools, error reports), corosync |
| Containers | Docker (grouped by image), Kubernetes (DaemonSet) |
| FTP | vsftpd, Pure-FTPd |
| PHP | php-fpm (including several versions side by side) and mod_php |
| Node.js | systemd, pm2 and Windows services: up/down, crash restarts, logs |
| OS health | systemd state, cron activity, pending updates and security patches per package manager, reboot-required |
| Security signals | SSH brute-force with attacker sources, root logins, sshd config doors, OOM kills, file integrity, open ports, CIS-subset hardening scan |
| Backups | borg, restic, any artifact path by age |
Anything exposing a Prometheus endpoint can be scraped by the prom probe mode, and
apps can push their own app.* metrics to the local ingest port, so coverage does not
end at this table.
APM and RUM
| Runtime | Covered | Notes |
|---|---|---|
| PHP 8.1 to 8.5 | yes | php-fpm and mod_php, glibc and musl, multiple versions on one host. Prebuilt signed artifacts, staged activation; the CPU profiler knows 8.5 as well. |
| WordPress | yes | Hook-level spans (deep trace), N+1 insights, per-plugin CPU attribution. |
| PHP below 8.1 | partial | Zero-touch RED metrics and everything non-APM still work; method-level spans need 8.1+. |
| .NET | yes | ASP.NET Core under systemd and IIS app pools, Windows and Linux, CPU flamegraphs via EventPipe. |
| Node.js | yes | Node 18.19+ under systemd, pm2 or a Windows service, provisioned and staged like PHP; bare launches get a ready recipe. Runtime metrics (event loop, GC, heap) and per-service telemetry included; CPU flamegraph via an opt-in grant on Linux. |
| Java, Python, Go | partial | Bring your own OpenTelemetry SDK; the agent's local OTLP receiver accepts the spans into the same pipeline. |
| CPU profiler (PHP) | yes | Non-thread-safe php-fpm builds, from outside the process. ZTS variant and arm64 artifacts are planned. |
| RUM | yes | Auto-injected on instrumented PHP sites; any other site via the hosted snippet. |
Layer-1 RED needs eBPF (VM, bare metal, or a privileged container); in unprivileged containers the same numbers come from access logs automatically.
Kubernetes
k3s clusters are covered end to end (that is where it runs live); kubeadm and k0s kubeconfig layouts are read when the agent runs on the node. Per-namespace and per-pod usage needs the metrics-server. See Kubernetes.
Network devices (SNMP)
Agentless, through a collector host. See SNMP and network.
| Capability | Covered | Notes |
|---|---|---|
| SNMP v1, v2c, v3 | yes | v3 USM with auth and privacy; credentials stay on the collector. |
| Standard MIBs | yes | IF-MIB (ports, traffic, errors), UPS-MIB, HOST-RESOURCES-MIB, ENTITY-SENSOR-MIB (temperatures, fans, PSU, optical dBm), PoE tables. |
| Vendor bundles | yes | MikroTik health, APC PowerNet; more are just signed definitions. |
| Traps and informs | yes | v2c traps and v3 informs, with anti-spoof source filtering and a confirming poll. |
| Syslog | yes | Collector-side listener with severity rates and pattern counters. |
| Subnet discovery | yes | Scan of an approved range into candidates, never automatic polling. |
| Topology | yes | LLDP and MikroTik neighbor tables, FDB, ARP, VLANs; map, MAC search and address book in the console. |
| Traffic flows | yes | NetFlow v5 and v9, IPFIX; aggregated on the collector, raw flows never leave the site. sFlow planned. |
| Config backup | yes | Over SSH from the collector; RouterOS, Cisco IOS, Junos, FortiGate, EdgeOS recipes; versions and diffs in the console. |
Not yet, honestly
sFlow ingestion, arm64 APM artifacts, the ZTS variant of the PHP profiler, and a .deb
package are planned and marked on their pages. If it is not marked Planned in this
documentation, it is live.