Invite
Add team members to the Oneleet Portal. They receive install instructions.
Device security.Zero friction.
Lightweight agent that monitors firewall, disk encryption, screen lock, and more. Automatic compliance evidence without invading employee privacy.
Device compliance evidence on autopilot
Every device check generates timestamped proof that your fleet meets security requirements. When your auditor asks, it’s already there.
Why buy 8 tools when
one platform does it all?
Every Oneleet module shares evidence, context, and compliance mappings. Faster audits. Stronger security. Zero duplicate work.
Deploy in under a minute
Invite your team, install on macOS, Windows, or Linux, and see fleet-wide compliance status in one dashboard. The Agent checks settings, never personal data.
Install
One-click on macOS, Windows, or Linux. Or brew install oneleet/tap/oneleet-agent.
Monitor
Fleet-wide compliance status in your dashboard. Evidence collected automatically.
Security visibility.
Zero privacy invasion.
Cross-platform
Native support for macOS, Windows, and Linux. Same security visibility across your entire fleet.
Privacy first
Admins see pass/fail only. No files, browsing history, emails, messages, keystrokes, or screenshots.
End-to-end encrypted
TLS 1.3 in transit, AES-256 at rest. Your data is encrypted at every stage.
Transparent collection
Full documentation of exactly what we collect. No hidden telemetry. Zero-knowledge admin view.
Stop chasing employees for screenshots
 Oneleet | The old way |
|---|---|
| Continuous, timestamped compliance evidence, automatic | Manual screenshots of security settings before audits |
| Boolean checks: pass or fail. No privacy invasion | Employee surveys that nobody fills out |
| Always-current device posture across your fleet | Point-in-time evidence that’s outdated immediately |
| Powered by osquery: open-source, battle-tested | No visibility into actual device compliance |
Teams that already
quit the theater
Customer stories: DiligentCentralize
2,000+
companies secured, from seed to enterprise.
300+
teams migrated from Vanta, Drata and Secureframe.
100k+
vulnerabilities found and resolved.
“Their automated controls they have are also really solid and save what otherwise is a lot of screenshot gathering.”
Scott Mottedotenvx
Secure laptops.
Secure everything.
Device hardening is one layer. Combine the Agent with the full Oneleet platform for complete coverage.
Cloud Security (CSPM)
Secure the cloud and the devices accessing it.
View Cloud Security (CSPM)Code Security Scanning
Protect the code written on the devices the Agent monitors.
View Code Security ScanningPhishing Campaigns
Train the employees whose devices the Agent protects.
View Phishing CampaignsvCISO
Set the device policies the Agent enforces.
View vCISOThe honest answers.
“Consistently grateful we went with oneleet. You and the team have been awesome”
Adam RankinWarp
What does the Agent monitor?
Firewall status, disk encryption, screen lock, OS updates, and other security settings. Boolean states only.
What data is never collected?
Files, browsing history, emails, messages, keystrokes, screenshots, or any personal data. Period.
How does installation work?
One-click install on any platform. For Mac: brew install oneleet/tap/oneleet-agent.
Which operating systems are supported?
macOS, Windows, and Linux, with the same security visibility across your entire fleet.
How is the data protected?
TLS 1.3 in transit and AES-256 at rest. Your data is encrypted at every stage.
What does my auditor get?
Timestamped proof for every device check, showing your fleet meets security requirements. When your auditor asks, it’s already there.
Secure every device.
Respect every employee.
Lightweight monitoring. Automatic compliance. Zero privacy invasion.