Surface documentation

Find every AI tool on your employees' laptops, understand its risk, and carry out your decision to allow, warn, or block. These pages take you from the first laptop to a managed fleet.

Get started Quickstart

IntroductionWhat Surface does and how the pieces fit together.QuickstartOne laptop reporting to the console in 15 minutes.Deploy to your fleetSilent rollout with Jamf, Intune, Kandji, Mosyle, or GPO.Core conceptsEvery term the console uses, in plain English.

Browse by task

Deploy

Get the scanner onto laptops.

Requirements
Install script
Manual install
MDM: macOS
MDM: Windows
MDM: Linux
Browser extension

Discover

See what the scanner found.

Console overview
Insights
Inventory
Endpoints
Asset Graph
How risk is calculated
Policies
Risk rollups

Govern

Decide, and see how AI is used.

Allow, Warn, Block
Remediate Asset
Sessions
Review sessions
AI usage

Extend

Record sessions, store them where you want.

Prompt collectors
Claude Code
Chrome browser
Amazon S3
Splunk
Google Workspace
Entra ID or Okta

Administer

People, tokens, and the record.

Users and roles
Enrollment tokens
Audit log
Weekly report
Data handling
Self-hosting
FAQ
For employees

Scanner reference

For the laptop side.

Commands
Files, services, and logs
Update and uninstall
Troubleshooting
Release notes