Skip to content
Bastion EDR Docs

Quick Start

import { Steps, Tabs, TabItem, Aside } from ‘@astrojs/starlight/components’;

This guide gets you from zero to a running Bastion instance with one agent reporting in. Total time: under 10 minutes.

Step 1 — Start the backend

Section titled “Step 1 — Start the backend”

  1. Download the release package

    Terminal window
    curl -Lo bastion-backend.tar.gz \
      https://github.com/halden-technologies/bastion/releases/latest/download/bastion-backend-linux-x86_64.tar.gz
    tar -xzf bastion-backend.tar.gz
    cd bastion-backend

  2. Start with Docker Compose

    Terminal window
    docker compose up -d

    This starts SurrealDB on port 8000 and the Bastion backend on port 8080.

  3. Verify the backend is running

    Terminal window
    curl http://localhost:8080/health
    # {"status":"ok","version":"13.0.0"}

Step 2 — Install the console

Section titled “Step 2 — Install the console”
Download `bastion-console-windows-x64.msi` from the [latest release](https://github.com/halden-technologies/bastion/releases/latest). 
Run the installer. When prompted, enter your backend URL: `http://YOUR_SERVER_IP:8080`
 Download `bastion-console-macos.pkg` from the [latest release](https://github.com/halden-technologies/bastion/releases/latest). 
Open the PKG and follow the installer. Enter your backend URL when prompted.
 Download `bastion-console-linux-x86_64.deb` or `.rpm` from the [latest release](https://github.com/halden-technologies/bastion/releases/latest). 
```bash
sudo dpkg -i bastion-console-linux-x86_64.deb
bastion-console
```

Step 3 — Create your admin account

Section titled “Step 3 — Create your admin account”
  1. Open the console. You’ll see the login screen.
  2. Click “Don’t have an account? Create one”
  3. Fill in your username, email, and password.
  4. Submit — your 14-day trial license is automatically activated.

Step 4 — Install your first agent

Section titled “Step 4 — Install your first agent”
On the endpoint to monitor, download and run the agent installer: 
```powershell
# Download
Invoke-WebRequest -Uri "http://YOUR_SERVER_IP:8080/download/agent-windows-x64.msi" -OutFile agent.msi


# Install (silent)
msiexec /i agent.msi /quiet BACKEND_URL="grpc://YOUR_SERVER_IP:50051"
```


The agent installs as a Windows Service and starts immediately.
 ```bash # Download curl -Lo bastion-agent.deb "http://YOUR_SERVER_IP:8080/download/agent-linux-x86_64.deb" 
# Install
sudo dpkg -i bastion-agent.deb
sudo systemctl enable --now bastion-agent
```
 ```bash curl -Lo bastion-agent.rpm "http://YOUR_SERVER_IP:8080/download/agent-linux-x86_64.rpm" sudo rpm -i bastion-agent.rpm sudo systemctl enable --now bastion-agent ``` ```bash curl -Lo bastion-agent.pkg "http://YOUR_SERVER_IP:8080/download/agent-macos.pkg" sudo installer -pkg bastion-agent.pkg -target / sudo launchctl load /Library/LaunchDaemons/com.bastionedr.agent.plist ```

Step 5 — Confirm the agent connected

Section titled “Step 5 — Confirm the agent connected”

In the console, navigate to Endpoints. Your new endpoint should appear within 30 seconds with status Active.

That’s it. You’re protected.

What’s next?

Section titled “What’s next?”