Why most numbers are small
Most agent traffic is ordinary work, so a healthy system shows many events and few threats. That ratio is the point: Agent Antivirus has to stay quiet on normal work to be trusted when it speaks.
agentav telemetry --tail
Live from production
This is Agent Antivirus watching the EDS Agents production swarm in monitor-only mode. Nothing is blocked; every number shows what Agent Antivirus saw and would have done. The feed carries counts only: no prompts, no outputs, no customer data.
agent events scanned0
sessions0
agents0
threats caught0
would have been stopped0
held for a human0
verdict time, median / 95th pct– / – ms
events in that hourhour with at least one threathover or tab to a column for its numbers
Show these numbers as a table
| Hour | Events | Threats |
|---|
connecting to the AgentAV control plane
What is left out
Test traffic and any detection a reviewer marked as a false alarm are excluded from the threat counts. Status polling and other read-only requests are not recorded at all.
What is never shared
This page receives aggregate numbers and the names of detections, nothing else: no prompts, tool output, evidence, session IDs or agent names.
Want this view of your own agents?
Every pilot comes with a console that shows each detection and its evidence, and a report on day seven.