Get Started

Getting started with BlastShield is easy and free. Follow the five steps below and get up and running in as little as ten minutes.


Authenticate and Connect to BlastShield

Now that you have registered, you can connect to the BlastShield network using the Desktop Client on your computer and the Mobile Authenticator App on your phone. You will be asked to authenticate your biometrics on your phone to complete the authentication process.

Use the following steps to connect:

  1. Launch the client, select Mobile App as the Authentication Method.
  2. Launch your phone's authenticator app. Scan the QR code.
  3. Select your network in the Desktop Client and click on OK.
  4. Apply your face ID or fingerprint on your phone when prompted to authenticate
  5. You are now connected to the BlastShield network.

If you would like the BlastShield™ Client to stay connected when your screen is locked then you can configure this in the Client as described below:

  1. Click on the BlastShield icon on your desktop
  2. Click on the Settings menu
  3. Uncheck the option for 'Disconnect from network when desktop is locked'
Launch the Orchestrator

Connect to the BlastShield™ Orchestrator

To launch the Orchestrator simply click on the 'Launch Orchestrator' button in the Desktop Client. This will trigger an additional authentication step with a QR code scan and biometric check using the Mobile Authenticator app. Please remember that you must be connected to BlastShield™ before you can launch the Orchestrator. See the video below to learn how to launch the Orchestrator.

The Orchestrator will launch in your web browser at The Dashboard will be displayed as shown below.

Understand BlastShield Agents

The BlastShield Host Agent enables secure peer-to-peer access to a server from the BlastShield protected network. A BlastShield Agent is installed on each server which you want to protect. Access to that server is then controlled by policy in the BlastShield™ network.

Adding a new Agent - summary

The process to install and setup the BlastShield™ Agent on a server is summarized here:

  • Connect to the Orchestrator.
  • Create a new Agent instance in the Orchestrator and create a BSI file.
  • Install the Agent on the Linux server.
  • Register the Agent with the BSI file.
  • Start the Agent.
  • Configure policy to allow access to the Agent.
Currently supported builds

We currently have support for the following operating systems. If you don't see the operating system which you are using in this list, then please contact us here so that we can help you get the correct build.


  • Ubuntu 20.10
  • Ubuntu 20.04.2 LTS
  • Ubuntu 18.04 LTS


  • Debian 11 (Bullseye)
  • Debian 10 (Buster)


  • Centos 8
  • Centos 7


  • Amazon Linux 2

Raspberry Pi

  • Raspbian GNU/Linux 10 (buster)

Windows (Download the Agent installer for Windows)

  • Windows Server 2019
  • Windows Server 2016
  • Windows Server 2012
  • Windows 10


  • macOS 10.13 and later

64-bit builds for x86 CPUs are available.

Add BlastShield Agents to Protect Your Linux Servers

Step 1: Add a New Agent in the Orchestrator

  • Click on "Agents" in the "Manage" menu in the the left sidebar, and then click the red "Add New Agent" button at the top right.
  • The New Agent dialogue opens. Add a name for the Agent and a DNS Hostname. The DNS Hostname is optional and can be used to identify the Agent in the BlastShield™ network as BlastShield runs its own DNS..
  • Then click on the red "Save and Download Invitation" button and choose the option for "Save and copy Linux/macOS installation command to the clipboard". Click on that option to copy the command.

Step 2: Install and register the Agent

Open a terminal session on the Linux server where you are going to install the Agent.

  • Paste the command you just copied to the terminal and hit enter. This will start the software download.
  • The software will automatically install and run. The Agent will then automatically register with the Orchestrator. When the process has completed you will see the following message in the terminal window:

"Installation successful, the agent IP address is <Agent IP address>."

Step 3: View the status of the Agent

Now that the installation and registration processes have completed, your Agent is up and running.

You can check the status of the Agent by typing the following: sudo systemctl status blastshield

The logs may be viewed as follows:

sudo journalctl -u blastshield.service

The status of the new Agent on your server should appear as "Online" in the Orchestrator as shown in the image below.