MonBuddy

HomeFeaturesOn-premiseHow it worksSecurityFor parentsPricing Order MonBuddy
Download and installation

Download MonBuddy and try it for 7 days

Install MonBuddy Core on your own Windows server or computer. Without a licence key it requests a 7-day demo by itself: up to 3 computers, every feature, no payment details. With a purchased key it runs with a paid licence.

Downloads

Always the current release. Check each file’s SHA-256 before you run it.

MonBuddy Core Setup

Windows, 64-bit · for the server

The central service, its database and the Console in one Setup. Install it on the Windows server or computer that will receive and store the data.

Download the Core Setup
SHA-256
Checksum file: MonBuddy-Core-Setup.exe.sha256.txt
PowerShell
Get-FileHash .\MonBuddy-Core-Setup.exe -Algorithm SHA256

MonBuddy Agent MSI package

Windows, 64-bit · for Group Policy and Intune

Installs the agent on many computers at once with Group Policy or Intune. For a few computers you do not need it: they install the agent from your own Core (step 5).

Download the MSI package
SHA-256
Checksum file: MonBuddy-Agent.msi.sha256.txt
PowerShell
Get-FileHash .\MonBuddy-Agent.msi -Algorithm SHA256

Check the file before you run it

Open Windows PowerShell in the folder of the downloaded file and run the command shown under the file. The Hash value it prints must match the SHA-256 shown here or in the checksum file; upper and lower case do not matter. If it does not match, do not run the file: delete it together with any earlier copies (a browser saves a repeated download under a new name, such as “MonBuddy-Core-Setup (1).exe”), reload this page and download the file again.

The Setup and the MSI package are not code-signed yet, so Windows SmartScreen may warn about an unknown publisher when you start the Setup. Check the SHA-256 first: if it matches, the file is exactly the one published here.

Before you install

What the server, the monitored computers and the administrator need.

Server for MonBuddy Core

  • 64-bit Windows on a server or computer that is always on. The Setup checks this when it starts.
  • TPM 2.0, turned on. The Core keeps its identity key in the TPM, and the licence is bound to it. Without a usable TPM 2.0 the installation stops before the Core service starts and removes the services it has installed; the Setup shows the error and the path of its log. On a virtual machine, turn on a virtual TPM.
  • Administrator rights: Windows asks for administrator approval when the Setup starts.
  • HTTPS access (port 443) to license.monbuddy.io for the licence check, the demo licence and updates. For a network without internet access, ask us for an offline licence; it receives no automatic updates.
  • Disk space for the data. MonBuddy limits its live data so that at least 2 GB stays free on its drive; when it reaches this limit, it deletes the oldest screenshots first, then the oldest activity data. The space needed grows with the number of computers and the retention periods. Each nightly backup is a full copy of the database and of every screenshot, and backups are not deleted automatically: on the same drive they leave less room for the live data, so the Core deletes older screenshots and activity data sooner.
  • Nothing else to install: the Setup brings the database, the web server and the Console with it.
  • A Domain or Private network profile in Windows. On a Public network other computers cannot reach the Core; the Setup warns you if this is the case.

Monitored computers

  • 64-bit Windows (x64). Versions for macOS and Linux are not available yet.
  • Administrator rights to install the agent. The MSI package installs with system rights and without any prompt.
  • No TPM is needed.
  • A connection to the Core on the local network; from another subnet or over VPN, give the Core’s address when installing. The agent connects only to your own Core, never to the internet.

Administrator

  • A browser on a computer in the Core’s local subnet: the Console answers at https://<Core computer name>:8766 only from there.
  • An e-mail address and a password of 12 to 200 characters for the first administrator account, which you set in the Setup.
  • A place for the recovery packet away from the Core computer, for example a USB drive or a NAS.

Network connections

The Setup creates the Windows Firewall rules itself, for the Domain and Private profiles. The database and the internal services are reachable only on the Core computer itself.

ConnectionPortPurpose
Monitored computers → CoreTCP 8443 (HTTPS)Data, settings and agent updates; the agent accepts only your Core’s certificate.
Monitored computers → local networkUDP 47470Finding the Core automatically (broadcast)
Browsers on the local network → CoreTCP 80 (HTTP)The agent download page (/agent), for local addresses only
Administrator’s browser → CoreTCP 8766 (HTTPS)The Console, from the local subnet only
Core → license.monbuddy.ioTCP 443 (HTTPS)Licence check, demo licence and signed updates; also the Console’s e-mails when they go through MonBuddy’s mail relay

If you set them up, the Console also connects to your own mail server (SMTP) and to the addresses of your alert webhooks.

Installation step by step

From the download to the first monitored computer.

  1. Run the Setup

    Start MonBuddy-Core-Setup.exe on the server and approve the administrator prompt. The Setup is available in English, Hungarian, German, French, Italian and Spanish. It shows the licence agreement (currently in Hungarian), which you accept there. Then choose the installation folder (by default C:\ProgramData\MonBuddy), how long screenshots and activity are kept, and the e-mail address and password of the first administrator.

  2. Sign in to the Console

    When the Setup has finished, it opens the Console in the browser at https://<Core computer name>:8766. Sign in with the administrator account you created. On the Core computer the browser trusts the Console at once; on other computers it warns until you install the Core’s own certificate authority once. The Console’s sign-in page has a link for this, with the steps.

  3. Demo or licence key

    Without a key, the Core requests the 7-day demo licence by itself when it starts; it usually arrives within a few minutes. If you have purchased a licence, paste its key on the Console’s Licence page. If the Core has no licence yet, this page opens after the first sign-in; otherwise you find it under “System → Licence”.

  4. Save the recovery packet

    Next, the Console has you download the recovery packet (.mbrecovery), save it on a separate drive and select the saved file to verify it. There is no skip button: if the disk or Windows of the Core computer is lost, the encrypted backups can be decrypted only with this packet.

  5. Install the agent on the computers

    On a few computers, open http://<Core computer name>/agent in a browser on each one, download the installer and run it as administrator. It finds the Core on the local network and registers the computer. The page offers the installer once the demo or the licence is active.

    On many computers, deploy the MSI package with Group Policy or Intune. In the Console, the package icon in the header shows the ready command with this Core’s address. With TOKEN= and the content of the registration token file, whose location the Console’s Settings page shows, the computers are added at once:

    msiexec /i MonBuddy-Agent.msi /qn TOKEN=<token>

    Without a token, each new computer waits for your approval in the Console. Until you approve it, it uses no licence seat and nothing it sends is kept. The 7-day demo covers 3 computers.

  6. Updates run by themselves

    The Core updates itself, the Console and the agent package from license.monbuddy.io; every package is signed and checked before it is installed. A new release is installed at a random time 10 to 180 minutes after the Core finds it; the “Install now” button in the Console’s Settings starts it at once. The agents update themselves from your Core.

Licence, demo and backups

7-day demo without a key

A Core without a key requests a demo licence by itself: 7 days, up to 3 computers, every feature, always with the EU profile. Only one demo is available per server computer. The demo needs the licence server: 24 hours after the last successful licence check, collection stops until the next one.

When the demo ends

At the end of the 7th day, data collection stops. Existing data stays readable and exportable, and updates keep coming. To continue, order a licence and give the licence number and the key ending shown on the Licence page: after payment and approval, the Core switches to the paid licence by itself, with the same key.

Purchased licence

You find the licence key in the customer portal (customer.monbuddy.io) with “Reveal key”, which asks for your portal password. Paste it on the Console’s Licence page, which you later find in the System menu. The Core checks the key with the licence server before saving it, so a wrong key never replaces a working licence. The licence is bound to the TPM of the Core computer: to move the Core to new hardware, use “Request transfer” in the customer portal.

Backups

Every night at 02:00 the Core writes an encrypted backup into the Backups folder of the installation folder (by default C:\ProgramData\MonBuddy\Backups); in the Console you find them under “System → Backups”. Each backup is a full copy of the database and of every screenshot, and old backups are not deleted automatically. Copy the backups off the Core computer regularly, for example to a NAS, and delete the ones you no longer need from the Backups folder; otherwise they fill the drive, and the Core has to delete live screenshots and activity data early. Keep the recovery packet apart from the backups. Uninstalling MonBuddy Core keeps the data and the backups unless you choose to delete them.

Questions about the installation?

Tell us how many computers you want to connect and how your network is set up. We will help you plan the installation.