---
title: Requirements
description: Supported operating systems and the network access the scanner needs.
---

## Operating systems

| Platform | Architectures | Package |
| --- | --- | --- |
| macOS | Apple Silicon, Intel | `.pkg` |
| Windows 10 and 11 | x64 | `.msi` |
| Linux | amd64, arm64 | `.deb` and `.rpm` (any mainstream distribution from 2014 or later) |

Windows on ARM is not supported.

Installation needs administrator rights on every platform: root on macOS and Linux, SYSTEM or an administrator on Windows. The scanner runs as a system service and restarts on its own.

## Network

The scanner only makes outbound connections. No inbound ports are needed.

| Destination | Port | Used for |
| --- | --- | --- |
| `*.superalign.ai` | 443 (HTTPS and secure WebSocket) | Reporting, enrollment, policy updates |
| `superalign.ai/surface/releases/*` | 443 | Installer downloads and updates |

If your firewall opens up encrypted traffic to inspect it, let the scanner keep a live connection to `*.superalign.ai`. Without it, everything still works, but decisions reach laptops at the next 15-minute scan instead of within seconds.

## Browser extension

If you plan to record sessions from AI websites, laptops also need the Surface browser extension from the Chrome Web Store. See [Chrome browser](/surface/extensions/endpoint/prompt-collectors/chrome).