Skip to content

Red Cloak Endpoint Agent 🔗

Red Cloak End of Life

Red Cloak reached End of Support on July 31, 2026, and will reach End of Life on December 31, 2026. Existing deployments will stop functioning after the End of Life date. Migrate to Sophos Endpoint as soon as possible.

Use the information on this page during your migration to the Sophos Endpoint Agent before the Red Cloak End of Life on December 31, 2026.

Contact your Sophos account representative if you have any questions regarding your Red Cloak migration.

Red Cloak Lifecycle🔗

  • September 1, 2024: The provisioning of new deployments and/or building new packages on Red Cloak ended, though we continue to invest in and build new packages on the Sophos Endpoint Agent.
  • July 31, 2025: Secureworks will support all customers as they transition from Red Cloak to the Sophos Endpoint Agent and/or a third-party EDR agent of their choice.
  • July 31, 2026: Secureworks ended support for the Red Cloak Agent, including technical support, bug fixes, and security updates, to prioritize the Sophos Endpoint Agent and other supported agents. Until this date, users did not receive non-security fixes, feature updates, or design changes. We will support the Sophos Endpoint Agent and/or a customer’s chosen EDR agent in its place.
  • September 30, 2026: Red Cloak portal retired.
  • December 31, 2026: Red Cloak will reach End of Life. Existing deployments will stop functioning after the End of Life date. Migrate to Sophos Endpoint as soon as possible.

Migrate to Sophos Endpoint Agent🔗

Use these resources to migrate to the Sophos Endpoint Agent:

Uninstall Red Cloak Endpoint Agent🔗

This section provides information on how to uninstall the Red Cloak™ Endpoint Agent from Secureworks® Taegis™ XDR.

Click the tab for your operating system.

Use the following instructions to remove the Red Cloak Endpoint Agent Windows software with or without the registry and file system intact.

Remove Red Cloak Endpoint Agent with Registry and File System Intact🔗

To remove the Red Cloak Endpoint Agent software but leave the registry and file system intact, use Microsoft’s Add or Remove Programs feature:

  • For Red Cloak Endpoint Agent version 2.1.4.0 and later, remove both Dell SecureWorks Red Cloak Endpoint Agent and Dell SecureWorks Ignition.
  • For Red Cloak Endpoint Agent versions prior to 2.1.4.0, remove Dell SecureWorks Red Cloak Endpoint Agent.

Remove Red Cloak Endpoint Agent Including Registry and File System🔗

To remove the Red Cloak Endpoint Agent software completely, including registry and file system, follow these instructions:

Uninstall the Red Cloak Endpoint Agent🔗

To manually remove/uninstall Red Cloak Endpoint Agent from the command line, do the following:

For Red Cloak Endpoint Agent versions 2.1.4.0 and later:

  1. Open a command prompt.

  2. Execute the following commands:

    wmic product where name="Dell SecureWorks Red Cloak" call uninstall /nointeractive

    wmic product where name="Dell SecureWorks Ignition" call uninstall /nointeractive

For Red Cloak Endpoint Agent versions prior to 2.1.4.0:

  1. Open a command prompt.
  2. Execute the command: MsiExec.exe /x Drive:\path\redcloak.msi.

Example: msiexec.exe /x "C:\Downloads\Red Cloak\redcloak.msi

Registry Clean-up🔗
  1. Open the Registry Editor.
  2. Open the Search dialog box by pressing F3 or clicking Edit > Find and search for red cloak; alternatively, use the following list of locations.
  3. Manually remove any entry with Red Cloak Endpoint Agent references found in the registry search, or the following locations:
HKLM\SOFTWARE\RedCloak
HKLM\SOFTWARE\Dell Secureworks
HKU\.DEFAULT\Software\Dell Secureworks
HKU\.DEFAULT\Dell Secureworks
HKU\S-1-5-18\Software\Dell Secureworks
HKU\S-1-5-18\Dell Secureworks
HKCU\SOFTWARE\Dell Secureworks
File System Clean-up🔗

Delete the Dell SecureWorks folder from C:\Program Files (x86).

To remove the Red Cloak Endpoint Agent Linux software, run the following command:

  • For Fedora based distributions (i.e. CentOS)

yum remove redcloak

  • For Debian based distributions (i.e. Ubuntu)

apt-get remove redcloak