What data is sent by SVM Agents to the Cloud?
The Software Vulnerability Manager (SVM) Agent gathers file and system metadata to match detected programs against Secunia Research vulnerability intelligence. This article describes what information the Agent transmits during scans and how customers can review it.
The SVM Agent extracts the file name and version from each OCX, DLL, and EXE file found on the system. It collects the file name, version metadata, file path, and general product-related details. The Agent also records the hostname of the system where the software is detected to correctly attribute scan results.
Customers can verify the program data that the Agent sends by running it with verbose logging. Use the following command from the command-line interface to trigger an Agent scan with extra verbose output:
csia.exe -c -v -v -v > c:\temp\your-log.txt
This command produces a detailed log file showing every Agent action, including which files it considers and processes. At the end of the log, the detected software sent for analysis is listed.
For detailed information about how scanning and data collection work, refer to Helpnet’s documentation.
The same data types are collected by all versions of the SVM Agent, including on-premises installations. The only difference is that the on-premises version sends the data to a local SVM server rather than to the Flexera Cloud for processing.
Was this helpful?
