Skip to content
All guidesGetting started

Uninstall the Cybermatic device agent

Clean removal on Windows, macOS, and Linux — what each command takes with it, and how to tidy up the asset in Cybermatic afterwards.

  1. 1Before you begin. Uninstalling removes the agent program, its scheduled reporting, and its local configuration from the device. It changes nothing else — the agent is read-only, so there are no settings to restore. In Cybermatic, the device simply stops reporting: after 7 days a Medium "agent stopped reporting" finding opens. Once you've uninstalled on purpose, finish the job in Cybermatic by deleting the asset (Assets → select → Delete) — that closes its findings and frees the slot against your plan's asset limit.
  2. 2Windows. Settings → Apps → Installed apps → Cybermatic Agent → Uninstall. This removes the program, the hourly scheduled task, and the enrollment configuration. For silent mass-removal (Intune, GPO, RMM): "C:\Program Files\Cybermatic Agent\uninstall.exe" /S
  3. 3macOS. Run these commands in Terminal: sudo launchctl unload /Library/LaunchDaemons/ai.cybermatic.agent.plist && sudo rm -f /Library/LaunchDaemons/ai.cybermatic.agent.plist /usr/local/bin/cybermatic-agent && sudo rm -rf "/Library/Application Support/Cybermatic" The first command stops the reporting daemon; the rest remove the daemon definition, the program, and the enrollment configuration. The log file at /var/log/cybermatic-agent.log can be deleted too if you want no trace left.
  4. 4Linux (Debian/Ubuntu). sudo apt remove -y cybermatic-agent && sudo rm -rf /etc/cybermatic Package removal stops and removes the service and program. The second command removes the enrollment configuration — it was created by enrollment, not by the package, so the package manager deliberately leaves it behind (use apt purge and it still remains, since the agent wrote it at enroll time).
  5. 5Linux (RHEL/Fedora/Amazon Linux). sudo rpm -e cybermatic-agent && sudo rm -rf /etc/cybermatic Same shape as the Debian removal: the package takes the service and binary, the rm takes the enrollment configuration.
  6. 6Afterwards, in Cybermatic. The device's last-seen time freezes at its final report. Nothing breaks — but to keep the register honest: • Delete the asset (Assets → select the device → Delete). Its findings close automatically. • If the device was in any asset groups, it falls out of their live membership on its own — the group shows a stale-member marker until you tidy it. • If you're replacing the device rather than retiring it, the new install gets a fresh identity only if the hardware changed; the same machine re-enrolled reports under the same asset. Enrollment tokens are unaffected by uninstalls — revoke a token (Settings → Device agents) only if you want to stop every device that used it.

Tip: Uninstalling stops future reports but doesn't delete history — the asset and its findings stay in Cybermatic until you delete the asset. That's deliberate: a device that silently vanished and one that was retired on purpose should look different.

More in Getting started