Getting Started

Follow these four steps to deploy Scar across your organization and start detecting insider threats in minutes.

Step 1: Create Your Organization

1
Sign up at app.scarsecurity.io
Use your work email to create an account. You will receive a verification email within seconds.
2
Create your organization
Enter your organization name and select your preferred data region (US, EU, or APAC). This determines where your monitoring data is stored.
3
Invite your security team
Add team members by email. Assign roles: Admin (full access), Analyst (view and investigate), or Viewer (read-only dashboards).

Step 2: Generate Your API Key

API keys authenticate your Scar agents with the server. Each organization has a unique key that must be embedded in agent configurations.

Navigate to Settings > API Keys in your dashboard.

Click Generate New Key and copy the key immediately. For security, the full key is only shown once.

Example API Key

scar_ak_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Important: Store your API key securely. Do not commit it to version control or share it in plaintext. Use environment variables or a secrets manager.

Step 3: Install the Agent

The Scar agent runs as a lightweight background service on each endpoint. It collects monitoring data and securely transmits it to the Scar API.

Windows

# Download the installer
Invoke-WebRequest -Uri "https://dl.scarsecurity.io/agent/latest/scar-agent-setup.exe" -OutFile "scar-agent-setup.exe"

# Install with your API key
.\scar-agent-setup.exe /S /API_KEY=scar_ak_live_xxxx

macOS

# Install via Homebrew
brew tap scarsecurity/tap
brew install scar-agent

# Configure and start
scar-agent configure --api-key scar_ak_live_xxxx
sudo scar-agent start

Linux (Debian/Ubuntu)

# Add repository
curl -fsSL https://dl.scarsecurity.io/gpg.key | sudo gpg --dearmor -o /usr/share/keyrings/scar.gpg
echo "deb [signed-by=/usr/share/keyrings/scar.gpg] https://dl.scarsecurity.io/apt stable main" | sudo tee /etc/apt/sources.list.d/scar.list

# Install
sudo apt update && sudo apt install scar-agent

# Configure and start
sudo scar-agent configure --api-key scar_ak_live_xxxx
sudo systemctl enable --now scar-agent

Verify installation: Run scar-agent status to confirm the agent is running and connected. The agent should appear in your dashboard within 60 seconds.

Step 4: View Your Dashboard

Once agents are installed and reporting, your dashboard will populate with real-time data within minutes.

Organization Overview

See total active devices, average risk score, alert volume, and top risk users at a glance. Filter by department, location, or time range.

User Timeline

Drill into any user to see a chronological timeline of all monitored activity: screenshots, app usage, file operations, USB events, and AI risk score changes.

Alert Management

Review, acknowledge, and investigate alerts. Mark alerts as false positives to train the AI. Export investigation reports for compliance and legal teams.

Reports & Analytics

Generate scheduled reports on risk trends, policy compliance, and user behavior. Export as PDF or CSV. Share with stakeholders via email.

What's Next?

Configure alert rules tailored to your organization's policies.
Set up integrations with Slack, Microsoft Teams, or your SIEM.
Define custom monitoring policies for different departments or user groups.
Invite additional team members and assign appropriate roles.