Introducing the new Magnet Nexus hybrid collection agent
Every organization is unique—from its network environment and data residency requirements to the volume and variety of endpoints and their operating systems.
Navigating this intricacy while performing equally complex digital investigations can slow you down if you don’t have the right solution.
That’s why we built Magnet Nexus: to eliminate the complexity from digital investigations and help your team focus on uncovering the truth. Nexus is a scalable, SaaS-based solution for remote endpoint investigations.
We’ve taken our proven forensic technology to the cloud, making it easier to investigate large volumes of data from multiple endpoints and separate critical insights from the noise.
Now, we’re making it even easier to integrate Nexus into your environment.
We’re excited to introduce the new Nexus hybrid collection agent: a single persistent, lightweight endpoint agent that works with both Nexus and Magnet Axiom Cyber, giving you total flexibility to collect data from remote endpoints using either cloud or on-prem workflows with zero redeployment.
It’s a unique technology designed to bring together our SaaS and on-premises solutions in a new way to simplify your workflow and give you more visibility and control.
You stay in control of how and where data is stored—whether that means routing collections through our cloud-based solution Nexus, for speed and scale, or keeping everything in your environment using Axiom Cyber to meet stricter security, compliance, and data residency requirements.
A single hybrid collection agent with two powerful workflows
In complex environments, analysts often face tradeoffs between ease of access and operational control. In the State of Enterprise DFIR – 2025 Report, 42% of DFIR practitioners said collecting from remote endpoints is a challenge. The hybrid agent eliminates those tradeoffs and the delays they cause.
With the new hybrid agent, you no longer need to deploy two agents or choose between cloud-based speed and on-premises control. You get the best of both worlds.
The same agent can now be used to initiate data collection:
- From Nexus, to take advantage of cloud-powered speed and scale with multi-endpoint targeted collections and parallel processing; or
- From Axiom Cyber, our all-in-one solution for deep-dive forensic investigations and remote collections to control collections entirely within your own environment. This is ideal for highly sensitive investigations, or if your organization’s policy doesn’t allow for data to leave the region.
Watch this short video to understand what makes this new agent different, why you need it, and how it works:
Built for modern DFIR teams in modern environments
For organizations juggling multiple tools and workflows across different cases, Nexus and the new hybrid agent help simplify it.
Here are a few key situations where the hybrid agent really shines:
- Control where your data is stored: Start collections in Nexus to take advantage of cloud speed and scale, or use Axiom Cyber when the data needs to stay within your environment. You’re in control of where the data goes, so it’s easy to align with internal policies, client requirements, or regulatory obligations.
- Reduce admin and deployment delays: It reduces “agent bloat” by eliminating the need to deploy two different collection agents. If you choose to deploy it organization-wide as part of a golden image deployment, you keep endpoints collection-ready with less ongoing burden and deployment requests that on-demand agents require. (Nexus still allows you to deploy an agent as needed, should your organization prefer it.)
- Unified workflows reduce blind spots: Even when a collection is initiated through Axiom Cyber, Nexus stays in the loop acting as the orchestrator and bringing visibility to workflows that were previously siloed. While the collected data remains viewable only within your local Axiom Cyber environment, the activity is still recorded in the Nexus audit log giving you a centralized view of activity across both solutions.
- Enhanced security and compliance: Collections are encrypted, authenticated, and fully auditable. Also, the deployed agent doesn’t require self-signed certificates or custom requirements in your firewall. AWS–managed certificate authority validates the agent, so you stay aligned with internal security requirements and skip delays tied to custom configurations.
How to get started today
The hybrid agent is available now for all Nexus customers.
This update is about giving investigative teams the freedom to work the way they need to, without jumping through (more) hoops. To take advantage of it:
- Upgrade to version 9.6 of Axiom Cyber and integrate your instance of Axiom Cyber with Nexus.
- There is no need to redeploy the Nexus agent. The agent is automatically updated to the latest version to take advantage of the new hybrid capabilities.
- Begin initiating collections from either solution, Nexus or Axiom Cyber.
- Important note: An internet connection is required. You need to login to Nexus within Axiom Cyber to connect the two solutions and allow Nexus to act as the data orchestrator. Endpoints require an internet connection to broker the connection through Nexus to Axiom Cyber.
With the hybrid agent in place, you can immediately collect data for any scenario—whether it’s a litigation hold, an insider threat, or a cyber incident—without waiting to deploy a new agent. This ensures you’re ready to respond quickly and choose the best collection method for your needs.
Join us for a live webinar
Register for a special product update webinar about the new hybrid agent on October 15, 2025, where we’ll walk through:
- What is the new hybrid agent and how does it work?
- Real-world use cases for cloud vs. on-prem workflows
- Tips to maximize speed, visibility, and compliance
Want to learn more or see it in action?
Contact us today, request a free trial, or talk to your Magnet Forensics sales representative to schedule a personalized demo.