Runewrd Labs
ConsoleGet early access
MenuClose

Rune Gurd docs

Install and enroll

One command installs Guard and enrolls the device. The installer asks for your enrollment token and hides what you type. Your organization's address is on the Console's **Deployment** page.

macOS and Linux, in a terminal. The installer asks for sudo, and Linux needs systemd, curl and tar:

curl -fsSL https://packages.runeward.io/guard/install.sh | sudo sh -s -- --enroll https://<your-org>.runeward.io

Windows, in PowerShell run as administrator. Use this form, because irm … | iex would install Guard without enrolling the device:

& ([scriptblock]::Create((irm https://packages.runeward.io/guard/install.ps1))) -Enroll https://<your-org>.runeward.io

On a Mac, grant Full Disk Access to guard-sensor after installing.

For packages, MDM or installing with your AI agent, see Packages and device management.

Uninstall

macOS and Linux:

curl -fsSL https://packages.runeward.io/guard/install.sh | sudo sh -s -- --uninstall

Windows, in PowerShell run as administrator:

& ([scriptblock]::Create((irm https://packages.runeward.io/guard/install.ps1))) -Uninstall
  • Each user runs guard uninstall first to remove their hooks. Findings, logs and enrollment are kept, so a reinstall reports to the same organization.
  • To stop the device reporting, revoke it in the Console. On a Mac, also remove guard-sensor from Full Disk Access.
  • Start fresh (permanently deletes the device's findings and enrollment): delete /Library/Application Support/Rune Guard and /Library/Logs/Rune Guard on macOS, /var/lib/runeward-guard on Linux (the package uses it too), or %ProgramData%\Rune Guard on Windows.

Installed from a package or MSI? See Uninstall a package install.

Written from docs/test-channel-install.md, docs/device-management.md at commit fb79778d02f0. Rune Guard is in early access.