CO-37 — Download

Signed releases

Every release ships with the ZIP, the signature (.sig) and the checksum (.sha256). The latest version is always on the releases page.

Free up to 15 hosts

The free tier is permanent, not a trial. No enrolment token needed — hosts enrol themselves and you approve them in the portal.

Licence: BUSL 1.1

The source code is public. Free for up to 15 approved hosts per installation, chargeable above that.

Go to releases View source code

Updates straight from GitHub: since 0.38.2 the server can fetch new versions itself — Settings → Update → “Check for updates”, optionally once a day. A fetched package goes through the same signature check as an uploaded one; installing it stays a separate, explicit step.

The agent packages are not signed. They are built on your own server — the update watcher rebuilds them after every system update. A signing key would therefore have to live there, and a vendor key on every customer installation would be worse than no signature at all. That is why the SUSE command carries --allow-unsigned-rpm and Windows shows a warning for the MSI. This does not affect signature checking of your distribution’s repositories — that stays on — and the release package and the agent code are signed.