Download Ensure Endpoint
Install the Ensure agent to access your organization's protected systems. It's lightweight (about 5 MB), does not require admin rights, and does not access your personal files.
Select your device to download the agent.
Windows
Compatible with Windows 10 and Windows 11 (Home, Pro, Enterprise).
No admin rights required. No restart needed.
macOS
Compatible with the current macOS version and the previous two major versions.
No admin rights required. No restart needed.
Verification, not management.
What the agent checks at login, then continuously — posture every hour, risky software every 30 seconds (based on your organization's policy):
Broker Device
Personal laptop
Ensure Check
Posture verified
Identity Provider
Okta / Entra ID
Protected App
Access granted
Broker Device
Personal laptop
Ensure Check
Posture verified
Identity Provider
Okta / Entra ID
Protected App
Access granted
What it checks
- Disk encryption (BitLocker, FileVault, or device encryption)
- Antivirus status (installed, active, up to date)
- Firewall status
- Operating system version and update level
- Risky remote access tools (example: TeamViewer, AnyDesk)
- Device lock or password protection (if required)
What it does not do
- Does not read or upload your files, emails, photos, or messages
- Does not track location or browsing activity
- Does not install an MDM profile
- Does not let your organization control your device
- Does not remotely wipe your device
- Does not run constant scans in the background
In plain terms: the agent answers one question at login — and keeps answering it every hour. "Does this device meet the minimum security rules set by your organization?" If yes, you stay connected. If no, you get clear steps to fix it. Risky remote-access tools are scanned every 30 seconds.
Three simple steps.
Download the agent for your device above.
Open the installer and follow the prompts. Most installs finish in under 60 seconds.
Log in to your organization's portal as usual. Ensure will verify your device automatically.
No setup. No special account. No extra software to manage.
Common questions
Deploying Ensure across your contractor workforce?
For enterprise rollout guidance (silent install, policy groups, deployment options), contact your Ensure account team or support.