Quickstart: Security agent reference architecture

Microsoft Defender for IoT provides reference architecture for security agents that log, process, aggregate, and send security data through IoT Hub.

Security agents are designed to work in a constrained IoT environment, and are highly customizable in terms of values they provide when compared to the resources they consume.

Security agents support the following features:

Defender for IoT Security agents is developed as open-source projects, and are available from GitHub:


  • None

Agent supported platforms

Defender for IoT offers different installer agents for 32 bit and 64-bit Windows, and the same for 32 bit and 64-bit Linux. Make sure you have the correct agent installer for each of your devices according to the following table:

Architecture Linux Windows Details
32 bit C C#
64 bit C# or C C# We recommend using the C agent for devices with more restricted or minimal device resources.

Next steps

In this article, you got a high-level overview about Defender for IoT Defender-IoT-micro-agent architecture, and the available installers. To continue getting started with Defender for IoT deployment, review the security agent authentication methods that are available.