Threat Stack is transitioning to a new brand: App Infrastructure Protection (AIP). Until this process completes in December 2022, documentation will use "Threat Stack" and "AIP" interchangeably. For more information, see Introduction to AIP.

FAQ: Can AIP remove Agents from our servers?

App Infrastructure Protection (AIP) automatically revokes Agents that are offline for 24 hours in a row. App Infrastructure Protection (AIP) disables the revoked Agent on your server, removes the agentID, and stops trying to connect to the Agent. As a result, the following occurs with Agent data:

Data about the Agent itself permanently deletes from the AIP Cloud Security Platform.
Alerts and events associated with alerts remain in the AIP CSP.
Event data not associated with alerts ages out of AIP according to the data retention rules established on the AIP CSP.

Table of Contents