01
Language packages
npm, pnpm, yarn, pip, poetry, uv, gems, Go modules, Cargo.
- Collects
- Installed + lockfile-declared.
- Where
- node_modules, package-lock.json, site-packages, poetry.lock, ~/.cargo
Inventory
Nine surfaces. Read-only. Deterministic.
Drig, Sekeye's endpoint binary, is a single 10 MB Go executable, rule-based, no LLM on the box. All matching happens server-side against a signed catalog. Cross-compiled for macOS, Linux, and Windows on amd64 and arm64; measured perf below is Linux-only for now.
Measured. Linux
Real numbers from a real box.
Rig: Parrot Security 7.3, Linux 6.17, Intel i7-10750H (6c/12t · 2.6 GHz), 16 GB RAM. Full-scan bench inside an ubuntu:latest container so the app collector saw a real dpkg set. Reproducible on request; the bench harness lives in the private agent repo. macOS and Windows: no numbers, not tested.
| Metric | Typical laptop · 874 artifacts | Heavy load · 3,215 artifacts |
|---|---|---|
| Surfaces populated | 8 of 9 | 8 of 9 |
| Full-scan wall-clock, warm (serial) | 32 ms | 103 ms |
| Full-scan, warm (parallel ×4) | 18 ms | 59 ms |
| Peak RSS during scan | ~11 MB | ~18 MB |
| Full snapshot, raw JSON on the wire | 297 KB | 1.1 MB |
| Full snapshot, gzipped (planned) | 21 KB | 71 KB |
| Typical delta, raw / gzip | 1.7 KB / 322 B | 1.7 KB / 322 B |
| No-change delta | 58 B | 58 B |
| Static binary | 10 MB | 10 MB |
Wire today
Ingest is JSON + Bearer auth on the current agent. Protobuf snapshots and gzip land in M6, alongside mTLS.
Cold scans
Cold-start scans vary by home-dir size. Bench fixture includes synthetic sleeps in fake agent CLIs and isn't representative. Warm-scan figures are what we quote.
Discovery I/O
Home-walk cost is bounded by budget and hints. Numbers above are from a small container home; large real-user homes add tens of ms to discovery.
02
Browser extensions
Chrome, Edge, Brave, Firefox — all OS.
- Collects
- ID, version, permissions, update URL, install source, sideload flag.
- Where
- Browser profile directories
03
IDE extensions
VS Code, Cursor, Windsurf, JetBrains.
- Collects
- ID, version, publisher.
- Where
- ~/.vscode/extensions, JetBrains plugin dirs
04
MCP servers
The MCP layer your gateway can't see.
- Collects
- Server name, command / URL, args, env var names — never values — transport.
- Where
- claude_desktop_config.json, .mcp.json, Cursor / Windsurf configs, Continue YAML
05
AI agents & runtimes
Claude Code, aider, OpenClaw-class, custom skills.
- Collects
- Installed CLI agents, skills / plugins dirs, versions.
- Where
- npm globals, ~/.claude, skill dirs, PATH scan
06
Local models
Ollama, LM Studio, llama.cpp.
- Collects
- Runtime, model names, sizes, digests.
- Where
- ~/.ollama/models, LM Studio dirs
07
Applications
Baseline app inventory.
- Collects
- Name + version, no deep analysis.
- Where
- Windows registry / MSI, /Applications, dpkg, rpm
08
OS package managers
The self-provisioned layer of user-space installers.
- Collects
- Homebrew, winget, Chocolatey — names, versions, taps, buckets, sources.
- Where
- brew Cellar, winget LocalState, choco lib/*.nuspec
09
Machine profile
The endpoint's identity and state.
- Collects
- Hostname, OS + version, logged-in user, Drig version, uptime.
- Where
- System-level metadata
Privacy commitments
What Sekeye never collects.
These are permanent product commitments, not MVP simplifications. The ingest schema rejects any record that carries an env value.
- ×File contents beyond manifests and configs
- ×Secret or env var values — MCP configs give us names, never values
- ×Browser history
- ×Credentials
- ×Keystrokes