Clients

Clients lists every client. Clients with tools against policy come first.

Filter the list with All, Against policy, Not reporting or Clean. A clean client has at least one device, nothing against policy, and no devices that stopped reporting.

Each card shows the client's devices and how many are online, tools against policy, AI tools by risk, the last report, and how many devices are not reporting.

To add one, select New client. Admins and staff can add clients. See Add a client.

The client pageCopy Anchor Link

Getting startedCopy Anchor Link

A new client's page opens with a Getting started checklist. It ticks itself off as each step happens:

1. Create an enrolment token
2. First device enrols
3. First report arrives
4. Review the high-risk tools it found

The checklist stays until every step is done. It also goes once the client's first report is a week old. Until a device enrols, the page opens on the Enrolment tab.

Tiles and bannerCopy Anchor Link

Once the client has a device, the top of the page shows four tiles: Not allowed, in use, High risk, unreviewed, AI tools in use and Devices.

If any devices have not reported for 72 hours, a banner says so. They may be switched off, asleep, or no longer have the agent. Select Show devices to see them.

The page has four tabs.

AI toolsCopy Anchor Link

Every tool in use at this client. Admins can override a policy here for this client only. Baseline follows your policy for every client.

DevicesCopy Anchor Link

Every enrolled device that is not retired, with its users, AI tools, high-risk tools and last report. Devices with the most high-risk tools come first. A last report shown in amber means the device has stopped reporting.

Under each hostname are the operating system and the agent version. If a newer version of the agent has been published, the version shows in amber with the newer one beside it, for example "agent 0.5.1 (0.5.3 available)". See Agent updates.

Select a device to open it. See Devices.

EnrolmentCopy Anchor Link

Three cards:

• Install Lodestar: the current installers, and the one-line install for macOS and Windows.
• Intune or JumpCloud: Download MDM profile. Only admins see the button.
• Enrolment tokens: the tokens for the one-line install, an RMM, the Windows MSI or enrolling by hand. Only admins can create or revoke them.

See Enrol devices.

SettingsCopy Anchor Link

Only admins can change these. Staff and read-only users see the current values but cannot change them.

• Your own organisation: shown to MSPs. Select Mark as our own organisation on the client that is your own company. Up to 25 of its devices are free. Only one client can be marked, so marking one unmarks any other. To undo it, select Mark as a customer.
• AI account plans: choose Organisation default, On or Off for this client. Switching on asks every device at the client to audit now. Switching off asks you to confirm with Switch off and delete, because the plan and domain details collected for this client are deleted. See Account plans.
• History: how long to keep removed tools, network use older than 30 days and device timelines. Choose 30, 90, 180 or 365 days; 90 is the default. See History.

Audit every deviceCopy Anchor Link

Select Audit all at the top of the client page. It shows once the client has a device. See Audits.