FAQ

Does SheerSight need inbound access to my hosts? No. Agents connect outbound only — no inbound ports, no port-forwarding, no public IP. It works behind NAT.

Can SheerSight run arbitrary commands on my hosts? No. Agents execute only a fixed allow-list of actions, and every instruction is cryptographically signed and verified first. There is no shell access.

Do you store my credentials? No long-lived host secrets sit in the control plane. Source credentials are encrypted in your browser and only decrypted locally on your host — the platform sees ciphertext only.

How do I sign in? Through Zero-Trust access — your organization's SSO or a one-time PIN by email.

What does an agent need to run? A host you administer with outbound internet access. See Onboarding a host.

How do I report a security issue? Email security@sheersafe.com — see Security.

Something's missing here. These docs are actively being written. (Add a contact/feedback channel.)