Desktop Agent

The LowerPlane Desktop Agent is a lightweight application that runs on employee devices and automatically reports security compliance status to your LowerPlane dashboard. It checks encryption, firewall, screen lock, antivirus, OS updates, and more — replacing manual device audits with continuous automated monitoring.

How It Works

Install

Download and install the agent on your device (macOS, Windows, or Linux).

Run Checks

Click Run Checks to scan your device for encryption, firewall, screen lock, antivirus, OS updates, and more. Results are displayed immediately in the agent window.

Report Results

Review the check results. Once all checks are complete, click Report to submit the results to your LowerPlane dashboard. Admins see the compliance status in Personnel > Devices.

Security Checks

The agent performs the following checks on every platform:

Check	What It Verifies	Severity
OS Up to Date	Operating system has latest updates installed	High
Disk Encryption	Full disk encryption is enabled (FileVault, BitLocker, LUKS)	High
Firewall	System firewall is enabled and active	High
Screen Lock	Auto-lock is configured with password/PIN required on unlock	High
Antivirus	Endpoint protection software is installed and running	High
MDM Enrolled	Device is enrolled in Mobile Device Management (optional)	Low
Password Manager	A password manager is installed (optional)	Low

MDM Enrolled and Password Manager are recommended checks — they don’t affect overall compliance status but are tracked for security posture visibility.

Downloads

Current version: 1.5.1

macOS (Apple Silicon)

For M1, M2, M3, M4 Macs. Download .dmg file.

macOS (Intel)

For Intel-based Macs. Download .dmg file.

Windows (64-bit)

For Windows 10 and later. Download .zip file.

Linux (64-bit)

tar.gz archive for Ubuntu, Debian, Fedora, etc.

Installation Guide

macOS (Apple Silicon)

Download

Download lowerplane-1.5.1-macos-arm64.dmg from the link above or from the Employee Portal (Devices > Download Agent).

Install

Open the .dmg file and drag LowerPlane to your Applications folder.

Open

Open LowerPlane from Applications. If macOS shows a security warning, go to System Settings > Privacy & Security and click Open Anyway.

Enter your company email and password (or use SSO) to link the agent to your account.

Run Checks & Report

Click Run Checks to scan your device. Once results are displayed, click Report to submit them to the dashboard.

macOS (Intel)

Download

Download lowerplane-1.5.1-macos-amd64.dmg from the link above.

Install

Open the .dmg file and drag LowerPlane to your Applications folder.

Open

Open LowerPlane from Applications.

Enter your company email and password to link the agent.

Run Checks & Report

Click Run Checks, review results, then click Report to submit.

macOS Intel: “App is damaged” or Gatekeeper errorIf macOS blocks the app with a message like “LowerPlane.app is damaged and can’t be opened” or “Apple cannot check it for malicious software”, run the following commands in Terminal to remove the quarantine flag:

# Remove quarantine attribute
xattr -cr /Applications/LowerPlane.app

# If the above doesn't work, try:
xattr -d com.apple.quarantine /Applications/LowerPlane.app

# Then open the app
open /Applications/LowerPlane.app

Alternatively, you can right-click the app in Finder and select Open — macOS will show an option to open it anyway.This happens because the app is ad-hoc signed (not notarized by Apple). It is safe to run.

Windows

Download

Download lowerplane-1.5.1-windows-amd64.zip from the link above.

Extract

Right-click the .zip file and select Extract All. Choose a location like C:\Program Files\LowerPlane.

Run

Double-click lowerplane.exe to launch the agent. If Windows SmartScreen shows a warning, click More info then Run anyway.

Enter your company email and password to link the agent to your account.

Run Checks & Report

Click Run Checks, review results, then click Report to submit.

Auto-start on login: To have the agent start automatically when you log in, press Win + R, type shell:startup, and create a shortcut to lowerplane.exe in that folder.

Linux

Download

Download lowerplane-1.5.1-linux-amd64.tar.gz from the link above.

Extract

tar -xzf lowerplane-1.5.1-linux-amd64.tar.gz
cd lowerplane-1.5.1-linux-amd64
sudo mv lowerplane /usr/local/bin/

Run

lowerplane

Enter your company email and password in the application window.

Run Checks & Report

Click Run Checks, review results, then click Report to submit.

Platform-Specific Check Details

macOS Checks

Check	How It’s Verified
Disk Encryption	FileVault status via `fdesetup status`
Firewall	Application Firewall via `socketfilterfw --getglobalstate`
Screen Lock	`askForPassword` plist + display/system sleep timeout via `pmset`
Antivirus	Detects CrowdStrike, SentinelOne, Sophos, ESET, Malwarebytes, or built-in XProtect
OS Update	Compares current version against latest available via `softwareupdate`
MDM	Checks enrollment via `profiles status -type enrollment`
Password Manager	Detects 1Password, Bitwarden, LastPass, Dashlane, Keeper running processes

Windows Checks

Check	How It’s Verified
Disk Encryption	BitLocker status via `manage-bde -status` or `Get-BitLockerVolume`
Firewall	Windows Firewall status via `netsh advfirewall show allprofiles`
Screen Lock	Sleep/display timeout via `powercfg`, screensaver lock, GP inactivity policy
Antivirus	Windows Security Center `Get-MpComputerStatus` + third-party EDR detection
OS Update	Checks for pending updates via `Get-HotFix` and Windows Update API
MDM	Checks `HKLM\SOFTWARE\Microsoft\Enrollments` for MDM enrollment
Password Manager	Detects 1Password, Bitwarden, LastPass, Dashlane, Keeper running processes

Linux Checks

Check	How It’s Verified
Disk Encryption	LUKS encryption via `lsblk` and `dmsetup`
Firewall	`ufw`, `firewalld`, or `iptables` active status
Screen Lock	GNOME `lock-enabled` + `idle-delay`, KDE Autolock, `xss-lock` process
Antivirus	Detects ClamAV, CrowdStrike Falcon, SentinelOne, Sophos
OS Update	Checks package manager for pending updates (`apt`, `dnf`, `yum`)
MDM	Checks for Jamf, Mosyle, or fleet management agents
Password Manager	Detects 1Password, Bitwarden, KeePassXC running processes

Troubleshooting

macOS: "LowerPlane can't be opened because it was not downloaded from the App Store"

This is a standard macOS Gatekeeper security feature. Use one of these methods to allow the app:Method 1 — System Settings (Recommended):

Go to Apple menu () > System Settings (or System Preferences on macOS 12 and earlier).
Click Privacy & Security in the sidebar.
Scroll down to the Security section — you will see “LowerPlane” was blocked from use because it is not from an identified developer.
Click Open Anyway, then confirm in the dialog that appears.

Method 2 — Right-click Open:

Find LowerPlane in your Applications folder.
Right-click (or Control-click) the app and select Open from the context menu.
Click Open in the dialog to bypass Gatekeeper for this app.

Method 3 — Terminal (Advanced):

xattr -d com.apple.quarantine /Applications/LowerPlane.app

Then open the app normally. This removes the Gatekeeper quarantine flag entirely.

Windows SmartScreen blocks the app

Click More info on the SmartScreen dialog, then click Run anyway. This only appears on the first launch.

MFA required but not working

Make sure you complete the MFA step in the agent’s login screen. If using an authenticator app, enter the 6-digit code when prompted. If the code is rejected, check that your device clock is synchronized.

Checks show 'failing' but the feature is enabled

Some checks require specific configurations. For example, screen lock requires both an auto-lock timeout AND a password on unlock. Check the platform-specific details above for exact requirements.

Linux: libwebkit2gtk-4.0.so.37 — cannot open shared object file

On newer Ubuntu/Debian releases (24.04+), the LowerPlane agent may fail to start with:

lowerplane: error while loading shared libraries: libwebkit2gtk-4.0.so.37: cannot open shared object file: No such file or directory

This happens because libwebkit2gtk-4.0 was removed from Ubuntu 24.04+ repositories. The agent’s GUI requires this library for its embedded web view. Install it from the Ubuntu 22.04 (Jammy) repository:

# Add the Ubuntu 22.04 (Jammy) repository for WebKit
echo "deb http://archive.ubuntu.com/ubuntu jammy main universe" | \
sudo tee /etc/apt/sources.list.d/jammy-webkit.list

# Update package lists
sudo apt update

# Install the required WebKit libraries
sudo apt install libwebkit2gtk-4.0-37 libjavascriptcoregtk-4.0-18

After installation, run lowerplane again — the error should be resolved.

This adds the Ubuntu 22.04 repository as a package source. It is safe for these specific libraries but avoid running sudo apt upgrade with this repository enabled, as it could pull in older versions of other packages. You can disable it after installation:

sudo rm /etc/apt/sources.list.d/jammy-webkit.list
sudo apt update

The installed libraries will remain even after removing the repository.

How to uninstall

macOS: Drag LowerPlane from Applications to Trash. Windows: Delete the lowerplane.exe file and remove the startup shortcut if created. Linux: Run sudo rm /usr/local/bin/lowerplane.

Privacy & Data

The LowerPlane Desktop Agent collects only security compliance status. It does not collect:

File contents or browsing history
Keystrokes or screenshots
Application usage data
Location data
Personal files or documents

The agent reports: device name, OS version, encryption status, firewall status, screen lock configuration, antivirus presence, and MDM enrollment. All data is transmitted over HTTPS and associated with the employee’s LowerPlane account.

Getting Started

Compliance

Policies

Vendors

Personnel

Risk Management

Integrations

Tests

Assets

GDPR

Trust Center

LowerPlane AI

Settings

Employee Portal

Auditor Portal

Cloud Marketplace

How It Works

Security Checks

Downloads

macOS (Apple Silicon)

macOS (Intel)

Windows (64-bit)

Linux (64-bit)

Installation Guide

macOS (Apple Silicon)

macOS (Intel)

Windows

Linux

Platform-Specific Check Details

macOS Checks

Windows Checks

Linux Checks

Troubleshooting

Privacy & Data

​How It Works

​Security Checks

​Downloads

macOS (Apple Silicon)

macOS (Intel)

Windows (64-bit)

Linux (64-bit)

​Installation Guide

​macOS (Apple Silicon)

​macOS (Intel)

​Windows

​Linux

​Platform-Specific Check Details

​macOS Checks

​Windows Checks

​Linux Checks

​Troubleshooting

​Privacy & Data

How It Works

Security Checks

Downloads

Installation Guide

macOS (Apple Silicon)

macOS (Intel)

Windows

Linux

Platform-Specific Check Details

macOS Checks

Windows Checks

Linux Checks

Troubleshooting

Privacy & Data