Linux Installation

Install the We360.ai MyZen agent on Linux (Ubuntu) — Stealth-mode employee monitoring software installation guide.

On Linux, the We360.ai agent is deployed in Stealth mode using a shell installer. It runs silently in the background with no user interface, following your organization's tracking policies.

Standard (visible) mode is available on Windows and macOS. On Linux, the agent is distributed as a headless Stealth installer intended for IT-managed rollouts.

Prerequisites

Requirement	Detail
Distribution	Ubuntu (64-bit / x86‑64). Other Debian-based distributions may work but Ubuntu is the supported target.
Privileges	Root / sudo access is required to install the background service.
Antivirus/EDR	Add an exception for the agent if endpoint protection is active (see AV and EDR Exclusions)
Network	Outbound HTTPS/WSS on TCP 443 to the We360.ai endpoints (see The "Allowlist" Guide)

Download the Installer

1. Log in to the We360.ai web portal, or use the Download Links & Utilities page.
2. Download the Linux Stealth installer: zs-amd64.sh.

Before running it, rename the installer to your Stealth license key, keeping the .sh extension — for example A1B2C3D4.sh. The installer reads the tenant binding from its own filename, so do not run it under the generic zs-amd64.sh name.

Install

Open a terminal in the folder containing the renamed installer and run:

Terminal

chmod +x <stealth_license_key>.sh
sudo ./<stealth_license_key>.sh

The script installs the agent and registers a background service that starts automatically and survives reboots. No further interaction is required — there is no window or tray icon in Stealth mode.

Validate the Installation

Because Stealth mode is invisible on the device, confirm success from the server side:

1. Wait a few minutes after installation.
2. In the We360.ai portal, open the Devices view (or the user's detail page).
3. Confirm the Linux device appears and is reporting recent activity.

If no data arrives, review the Tracker Failure Diagnostic Guide and verify network reachability and AV/EDR exclusions.

Offline / Firewalled Environments

If the device cannot reach the discovery endpoint, IT can pre-provision service discovery with a protected zs-origin.json manifest at /etc/. See Pre-Provisioned Origin Data.

Uninstall

Use the Zen Cleanup Utility for Linux to fully remove the agent. Download it from Download Links & Utilities (zen_cleanup, available for amd64 and arm64), then run it with sudo.