Installation Overview
Install cnspec, register it with Mondoo Platform, and roll it out across your infrastructure.
This section walks you through installing cnspec, registering it with Mondoo Platform, and managing it across your fleet.
New to cnspec? The Quickstart gets you from install to your first scan results in a few minutes. Come back here when you're ready to register with Mondoo Platform or roll cnspec out across many hosts.
Before you start
Pick an install method
Linux
Install with the automated script, or with apt, dnf, yum, or zypper.
macOS
Install with the automated script, Homebrew, or the universal package.
Windows
Install with the automated script, the MSI installer, or Chocolatey.
Standalone binary
Download a self-contained binary for any supported operating system.
Register and configure
Register cnspec
Connect cnspec to Mondoo Platform with a registration token.
Use a credentials file
Register from a service account credentials file in CI/CD or automation.
Run cnspec as a service
Configure cnspec to scan continuously and report to Mondoo Platform.
Manage
Manage providers
Install and update the providers cnspec uses to scan different platforms.
Update cnspec
Keep cnspec current and learn about supported releases.
Uninstall cnspec
Cleanly remove cnspec from a host.
Deploy with automation
Ansible
Roll cnspec out with Ansible playbooks.
Chef Infra
Deploy cnspec with Chef recipes.
cloud-init
Install cnspec while a cloud instance provisions.
Secrets management
Manage cnspec credentials with HashiCorp Vault.
Get help
Stuck on an install? Join the Mondoo community Slack channel or ask in GitHub Discussions.
Quickstart
Install cnspec and run your first security scan in minutes. Scan a system, read the results, and explore your infrastructure with MQL.
System Requirements
Minimum operating system versions, CPU architectures, PowerShell version, and access rights cnspec needs to install and scan a local host.