PathMRI

Overview/Features/Three modes, six transports

Three modes, six transports

Same question, same answer.
You choose the footprint.

Agentless over credentials you already have, a managed agent, or an agent that runs once and deletes itself. The mode decides the footprint you accept — and two of the three leave nothing behind at all.

Download Read the manual

Agentless

Nothing is installed and nothing is uploaded. PathMRI works over the SSH or WinRM credentials you already have, and no inbound port is opened.

The lightest way in, and the usual answer when policy will not allow software on the host.

Agent

A single static Go binary, deployed by the controller. By default it binds loopback and is reached through an SSH tunnel, so no inbound port is opened on the host.

For hosts with no SSH, the controller dials the agent directly instead. Measures everything.

Ephemeral

The agent is uploaded, runs, and is gone — nothing is left on the host, and it still measures everything the installed agent can.

The mode to pick when you need full depth and are not allowed to leave software behind.

ModeNeeds on the hostInbound portLeaves behindCan measure
Agentless SSH or WinRMCredentials onlyNoneNothingMost
Agent SSH tunnel — the defaultAgent binary + SSH credentialsNoneThe agentEverything
Agent direct dialAgent binary + that host's own secretThe agent port (7777)The agentEverything
EphemeralSSH credentialsNoneNothingEverything
One question, one answer, whatever the mode. PathMRI never guesses. What it reports is what it measured, so a path it did not measure is named unmeasured — never dressed up as closed.

Next

Path verification What the probe does once it has a way onto the host. Kubernetes & Docker The full container engine runs agentless, over SSH. Download One self-contained application, free and on-premise.