The LowerPlane Desktop Agent is a lightweight application that runs on employee devices and automatically reports security compliance status to your LowerPlane dashboard. It checks encryption, firewall, screen lock, antivirus, OS updates, and more — replacing manual device audits with continuous automated monitoring.

​
How It Works

1

Install

Download and install the agent on your device (macOS, Windows, or Linux).
2

Sign In

Sign in with your company email. The agent links to your LowerPlane account and organization.
3

Automatic Checks

The agent runs security checks automatically and reports results to the dashboard. No manual action needed.
4

Continuous Monitoring

Results are synced periodically. Admins see real-time compliance status in Personnel > Devices.

​
Security Checks

The agent performs the following checks on every platform:
CheckWhat It VerifiesSeverity
OS Up to DateOperating system has latest updates installedHigh
Disk EncryptionFull disk encryption is enabled (FileVault, BitLocker, LUKS)High
FirewallSystem firewall is enabled and activeHigh
Screen LockAuto-lock is configured with password/PIN required on unlockHigh
AntivirusEndpoint protection software is installed and runningHigh
MDM EnrolledDevice is enrolled in Mobile Device Management (optional)Low
Password ManagerA password manager is installed (optional)Low
MDM Enrolled and Password Manager are recommended checks — they don’t affect overall compliance status but are tracked for security posture visibility.

​
Downloads

Current version: 1.4.9

macOS (Apple Silicon)

For M1, M2, M3, M4 Macs. Download .dmg file.

macOS (Intel)

For Intel-based Macs. Download .dmg file.

Windows (64-bit)

For Windows 10 and later. Download .zip file.

Linux (64-bit)

tar.gz archive for Ubuntu, Debian, Fedora, etc.

​
Installation Guide

​
macOS (Apple Silicon)

1

Download

Download lowerplane-1.4.9-macos-arm64.dmg from the link above or from the Employee Portal (Devices > Download Agent).
2

Install

Open the .dmg file and drag LowerPlane to your Applications folder.
3

Open

Open LowerPlane from Applications. If macOS shows a security warning, go to System Settings > Privacy & Security and click Open Anyway.
4

Sign In

Enter your company email and password (or use SSO) to link the agent to your account.

​
macOS (Intel)

1

Download

Download lowerplane-1.4.9-macos-amd64.dmg from the link above.
2

Install

Open the .dmg file and drag LowerPlane to your Applications folder.
3

Open

Open LowerPlane from Applications.
4

Sign In

Enter your company email and password to link the agent.
macOS Intel: “App is damaged” or Gatekeeper errorIf macOS blocks the app with a message like “LowerPlane.app is damaged and can’t be opened” or “Apple cannot check it for malicious software”, run the following commands in Terminal to remove the quarantine flag:
# Remove quarantine attribute
xattr -cr /Applications/LowerPlane.app

# If the above doesn't work, try:
xattr -d com.apple.quarantine /Applications/LowerPlane.app

# Then open the app
open /Applications/LowerPlane.app
Alternatively, you can right-click the app in Finder and select Open — macOS will show an option to open it anyway.This happens because the app is ad-hoc signed (not notarized by Apple). It is safe to run.

​
Windows

1

Download

Download lowerplane-1.4.9-windows-amd64.zip from the link above.
2

Extract

Right-click the .zip file and select Extract All. Choose a location like C:\Program Files\LowerPlane.
3

Run

Double-click lowerplane.exe to launch the agent. If Windows SmartScreen shows a warning, click More info then Run anyway.
4

Sign In

Enter your company email and password to link the agent to your account.
Auto-start on login: To have the agent start automatically when you log in, press Win + R, type shell:startup, and create a shortcut to lowerplane.exe in that folder.

​
Linux

1

Download

Download lowerplane-1.4.9-linux-amd64.tar.gz from the link above.
2

Extract

tar -xzf lowerplane-1.4.9-linux-amd64.tar.gz
sudo mv lowerplane /usr/local/bin/
3

Run

lowerplane
4

Sign In

Enter your company email and password in the application window.

​
Platform-Specific Check Details

​
macOS Checks

CheckHow It’s Verified
Disk EncryptionFileVault status via fdesetup status
FirewallApplication Firewall via socketfilterfw --getglobalstate
Screen LockaskForPassword plist + display/system sleep timeout via pmset
AntivirusDetects CrowdStrike, SentinelOne, Sophos, ESET, Malwarebytes, or built-in XProtect
OS UpdateCompares current version against latest available via softwareupdate
MDMChecks enrollment via profiles status -type enrollment
Password ManagerDetects 1Password, Bitwarden, LastPass, Dashlane, Keeper running processes

​
Windows Checks

CheckHow It’s Verified
Disk EncryptionBitLocker status via manage-bde -status or Get-BitLockerVolume
FirewallWindows Firewall status via netsh advfirewall show allprofiles
Screen LockSleep/display timeout via powercfg, screensaver lock, GP inactivity policy
AntivirusWindows Security Center Get-MpComputerStatus + third-party EDR detection
OS UpdateChecks for pending updates via Get-HotFix and Windows Update API
MDMChecks HKLM\SOFTWARE\Microsoft\Enrollments for MDM enrollment
Password ManagerDetects 1Password, Bitwarden, LastPass, Dashlane, Keeper running processes

​
Linux Checks

CheckHow It’s Verified
Disk EncryptionLUKS encryption via lsblk and dmsetup
Firewallufw, firewalld, or iptables active status
Screen LockGNOME lock-enabled + idle-delay, KDE Autolock, xss-lock process
AntivirusDetects ClamAV, CrowdStrike Falcon, SentinelOne, Sophos
OS UpdateChecks package manager for pending updates (apt, dnf, yum)
MDMChecks for Jamf, Mosyle, or fleet management agents
Password ManagerDetects 1Password, Bitwarden, KeePassXC running processes

​
Troubleshooting

This is a standard macOS Gatekeeper security feature. Use one of these methods to allow the app:Method 1 — System Settings (Recommended):
  1. Go to Apple menu () > System Settings (or System Preferences on macOS 12 and earlier).
  2. Click Privacy & Security in the sidebar.
  3. Scroll down to the Security section — you will see “LowerPlane” was blocked from use because it is not from an identified developer.
  4. Click Open Anyway, then confirm in the dialog that appears.
Method 2 — Right-click Open:
  1. Find LowerPlane in your Applications folder.
  2. Right-click (or Control-click) the app and select Open from the context menu.
  3. Click Open in the dialog to bypass Gatekeeper for this app.
Method 3 — Terminal (Advanced):
xattr -d com.apple.quarantine /Applications/LowerPlane.app
Then open the app normally. This removes the Gatekeeper quarantine flag entirely.
Click More info on the SmartScreen dialog, then click Run anyway. This only appears on the first launch.
Make sure you complete the MFA step in the agent’s login screen. If using an authenticator app, enter the 6-digit code when prompted. If the code is rejected, check that your device clock is synchronized.
Some checks require specific configurations. For example, screen lock requires both an auto-lock timeout AND a password on unlock. Check the platform-specific details above for exact requirements.
Ensure your device has internet access. The agent syncs over HTTPS to api.lowerplane.com. If your network uses a proxy, the agent may not be able to connect.
macOS: Drag LowerPlane from Applications to Trash. Windows: Delete the lowerplane.exe file and remove the startup shortcut if created. Linux: Run sudo rm /usr/local/bin/lowerplane.

​
Privacy & Data

The LowerPlane Desktop Agent collects only security compliance status. It does not collect:
  • File contents or browsing history
  • Keystrokes or screenshots
  • Application usage data
  • Location data
  • Personal files or documents
The agent reports: device name, OS version, encryption status, firewall status, screen lock configuration, antivirus presence, and MDM enrollment. All data is transmitted over HTTPS and associated with the employee’s LowerPlane account.