Skip to main content

​
What is Agent Charley?

Agent Charley is a security dashboard that lets your organization monitor, manage, and respond to threats across all enrolled endpoint devices. Powered by Agent Charley — a lightweight client that runs on each device — the platform aggregates telemetry in real time and surfaces actionable insights through a clean web interface.

Get Started

Enroll your first device in minutes

Policies

Configure DLP, app behavior, and flow tracking

Policy as Code

Deploy policies via CLI and CI/CD

API Reference

Integrate with the Charley API

​
Key Features

Endpoint Monitoring Agent Charley runs on each device and reports URL classifications, threat detections, and risk scores back to the dashboard. Metrics are aggregated hourly and daily for fast, scalable analytics. Threat Analytics Track dangerous blocks, risky warnings, and average classification time across your entire fleet — or drill down to a single device. Device Management Enroll devices with one-time codes or a persistent MDM enrollment key, view device status at a glance, and disable or remove devices without touching the endpoint. Security Policies Define app behavior, URL tracking categories, and DLP rules at the org level, per device group, or per individual device. Policies merge from broadest to most specific, so you set safe defaults org-wide and override only where needed. Data Loss Prevention (DLP) Scan clipboard paste events for sensitive patterns — credit cards, SSNs, custom regex — and block, warn, or log in real time. Configure per-app allowlists, Slack channel context awareness, and user-facing notifications. Policy as Code Version-control your policies in Git and deploy via CI/CD using the agent-charley-cli CLI or Python SDK. Preview diffs before applying, roll back with git revert, and enforce policy changes through pull request review. Team Collaboration Invite teammates, assign roles (Admin, Analyst, User), and control who can see or act on security data. Billing & Plans Choose between Basic, Pro, and Enterprise plans. Upgrade, downgrade, or manage your subscription directly from the dashboard — powered by Stripe. Integrations Connect Slack for real-time security alerts, configure SAML/OIDC SSO for your identity provider, and wire up webhook endpoints for custom alerting pipelines.

​
How It Works

┌─────────────┐      telemetry      ┌─────────────────┐
│ Agent Charley│  ───────────────►  │  Charley API    │
│  (endpoint) │                     │  (Express/Node) │
└─────────────┘                     └────────┬────────┘
                                             │
                                      ┌──────▼──────┐
                                      │  PostgreSQL  │
                                      │  (analytics  │
                                      │   rollups)   │
                                      └──────┬───────┘
                                             │
                                      ┌──────▼──────┐
                                      │  Dashboard  │
                                      │  (React)    │
                                      └─────────────┘
  1. Agent Charley is installed on endpoint devices and classifies URLs and network activity in real time.
  2. The API receives telemetry, aggregates it into hourly and daily rollups, and enforces org-level access control.
  3. The Dashboard presents analytics, device status, and team data — all scoped to your organization.