Platform support

Which operating systems, Linux distributions, Kubernetes setups, rollout paths and AI coding agents Quint supports.

​

Operating systems

Platform	Support
macOS on Apple Silicon, macOS 14 or later	Supported. The notarized installer package records agent activity, file and process events, and the network destinations of agent sessions.
macOS on Intel	Not supported.
Windows, 64-bit (x64)	Early access. The installer is signed by Quint Security. Roll it out as an Intune Win32 app from an install package, or install it on one computer. See Windows.
Linux	Early access. Roll it out with Ansible, Puppet or Chef from an install package, or install it on one computer. See Linux and Linux distributions.

Where the sensor isn’t installed, Quint can cover AI agents in Copilot Studio and Power Platform (in preview) and, in a pilot, machines through Microsoft Defender for Endpoint, CrowdStrike Falcon or SentinelOne. See Agentless coverage.

​

Linux distributions

Quint publishes signed packages for x86_64 and arm64. There is no apt or yum repository, so download the package file and install it directly.

Distribution	How Quint installs
Debian 11 or newer, Ubuntu 20.04 or newer	The .deb package.
RHEL 9, Rocky Linux 9, AlmaLinux 9, Fedora, Amazon Linux 2023	The .rpm package.
RHEL 8, Rocky Linux 8, AlmaLinux 8, Amazon Linux 2, Ubuntu 18.04	The install script. The package needs systemd 243 or newer, which these releases don’t have. See Linux.

RHEL, Rocky Linux and AlmaLinux run SELinux in enforcing mode by default. If yours do, talk to your Quint contact before you roll Quint out widely.

Quint uses port 9090 on each computer. Where another service already uses that port, such as the RHEL web console (Cockpit), the current release of Quint does not start. Talk to your Quint contact before you install on those computers.

​

Containers and Kubernetes

Quint can run in its own containers beside AI agents in Kubernetes pods. This is early access: the Quint images, the Helm charts and the admission webhook come from your Quint contact and are not available for download. See Run Quint with agents in containers. For a single Docker container, see Run an agent in a container with Docker.

Requirement	Version
Kubernetes	1.33 or newer
Container runtime	containerd 2.0 or newer on every node that runs governed pods
Nodes	Linux, with nftables and cgroup v2
Networking for the restricted setup	kindnet, Cilium (with Quint chained through cni.configMap), or Amazon VPC CNI on EKS

Runs on Amazon EKS and Google GKE managed clusters are recorded as unverified. The dashboard does not show this status. See Status recorded for runs.

​

Rollout paths

Every path starts in Add machines, which makes the files for your tool and gives its steps.

Path	Use it when
An install package, pushed by your MDM	You manage Macs in Jamf Pro, Microsoft Intune, Iru (formerly Kandji), Mosyle or another MDM. Your MDM pushes two profiles, then the installer. See Roll out with MDM.
An install package, as an Intune Win32 app	You manage Windows computers in Intune. See Windows.
An install package, placed by your configuration tool	You manage Linux computers with Ansible, Puppet or Chef. See Linux.
A one-time install code	You are adding one computer with no management tool. See One computer.

With Mosyle, the approvals profile and the installer have been pushed with no click on the Mac. Every other tool is early access.

On a Mac, the installer carries the two system extensions that record file, process and network activity; the approvals profile grants their approvals, and the enrollment profile connects the Mac to your organisation.

​

AI coding agents

Claude Code, Codex, Cursor and Gemini CLI are recorded in full, ten more agents at the tool-call level, and any other agent at the network level. See Supported agents. For any enrolled machine, Data Sources shows which agents on it are covered; an agent that is not listed is not recorded.

Every ruleset starts in shadow mode and records without interrupting anything. Arming enforcement is a step you take together with your Quint contact. See Shadow enforcement.