this document is for:

Deployment: Invicti Platform on-demand

Install internal agent on Windows

Invicti Platform allows you to use internal agents to scan targets within your internal environment that aren't publicly accessible from the internet. This is also useful when you prefer not to trustlist Invicti cloud agents.

This document explains how to install the Invicti internal agent in a Windows environment. For other installation methods, refer to:

• Install an internal agent using Docker
• Install an internal agent with proxy settings
• Install an autostaling agent using Kubernetes

Limitations for internal agents

When the site is internal, and you prefer using internal agents for the scan, you cannot create a new Login Sequence Record (LSR) or Business Logic Record. However, you can import them. For further information about recording and downloading an LSR, refer to the Standalone login sequence recorder overview.

Prerequisites

System requirements

To run scans successfully, the agent requires sufficient system resources. The agent only initiates a new scan if the following minimum resources are available:

• CPU: 2 free core CPU 64-bit processor
• Memory (RAM): 6 GB available
• Disk Space: 50 GB of free disk space

Access requirements

• Administrator privileges for command execution
• Invicti Platform Administrator role

Trustlisting requirements

• Trustlisting - US region
• Trustlisting - EU region

Resource allocation behavior

When the agent starts, it checks the available system resources and allocates scan slots accordingly. Each scan slot requires:

• 6 GB of available RAM
• 2 CPU cores
• 50 GB of free disk space

The agent determins how many scans can run in parallel based on these requirements.

info

If a machine has 15 GB RAM, 5 CPU cores, and 500 GB free disk space, the agent allocates 2 scan slots. This means up to 2 scans can run simultaneously, while any additional scans remain queued until a slot becomes available.

The agent dynamically manages resources before and during scan execution. If system resources drop under the required threshold, new scans aren't going to begin until sufficient resources are available.

Steps to install an agent on Windows

1. Select Scans > Agents from the left-side menu.
2. Click Add new agent.

3. Enter a name for the agent and click the Windows tile. The token that's displayed here is then used in the installation command.

4. By following the on-screen instructions you are going to

• create a folder where you are going save the agent,
• download the agent,
• and run two commands - one with and one without administrative privileges.

5. Click Done.

6. Your agent is now installed. You can view it in Invicti by going to the Scans > Agents page.

You can now assign targets to the installed agent and commence testing your website.

Troubleshooting

To troubleshoot any issues, review the logs located in the logs folder within the agent installation directory you created.

If you encounter an error when starting the agent, try adding Local Service permission inside the agent folder. To do this, right-click on your agent folder and select Properties > Security > Edit > Add. Then type Local Service in the text field and click OK > Apply. Once completed, navigate to Services to start the agent service.

For further assistance, contact our Support team.

Uninstall the service

If you need to uninstall the service, run the following command as a user with administrative privileges:

.\invicti-agent.exe service -u --log-level=info --log-file

---

Need help?

Invicti Support team is ready to provide you with technical help. Go to Help Center