What protection does
Protection stops bad software while it runs. Apple checks an app when it arrives. Cybee keeps watching after it starts, and stops a program that behaves like malware.
one day on Luca’s MacBook Pro26.09.2026
macOSbuilt in
FileVault· disk lock · on all day
Gatekeeper10:30 · app check at the door XProtect14:05 · Apple’s list of known bad softwareCybeeall day
00:0006:0012:0018:0024:00
My Mac already has security. Why add anything?
Apple’s security, and what Cybee adds.
Apple gives you a locked safe. Cybee gives you a bodyguard who watches what happens inside, keeps the whole building in order, and writes the report.
what Apple doesGatekeeper checks apps at the door. FileVault locks the disk. XProtect is Apple’s list of known bad software.
what Cybee addsCybee watches what programs do after they start. It dates what it sees, so you can show it later. It also turns Gatekeeper back on if someone turns it off, once the person who uses that Mac has said yes.
How does Cybee spot bad software?
On the Mac itself.
It watches what programs do, and stops one that behaves like malware. And it compares files on the Mac with a list of known bad software from a live feed.
No AI model on our servers decides which software is bad.
Behaviour patterns, each self tested at every start, and a list of known bad files.
Protection is one job. Safer settings are another: your Mac’s own security switches, such as disk encryption and screen lock, set the safe way.
| The job | What Cybee does |
|---|---|
| Protection | Stops a program that behaves like malware, while it runs. |
| Safer settings, checked | Checks 118 settings on each Mac and tells you which ones are off. |
| Safer settings, kept on | Sets them the safe way after the owner says yes, and puts them back if they drift. |
Both matter, and no tool stops every attack. Cybee tells you what it saw and what it did. How safer settings work
Read an alert
When Cybee stops something, you get one message in plain words: what happened, on which Mac, and what Cybee already did. Every alert has an id you can ask your AI assistant about.
Cybee14:07
A program was stopped on Ana’s MacBook Pro.
- Mac
- Ana’s MacBook Pro
- When
- Sat 26 Sep, 14:07
- What happened
- Cybee stopped a threat.
- State
- Stopped and quarantined.
- Alert id
- tnqxbe
Ask your AI assistant about alert tnqxbe
- 1
Read what happened.
The alert says what the program did, on which Mac, and when. Here, Cybee stopped a threat on Ana’s MacBook Pro at 14:07.
- 2
Ask whether it was expected.
Some alerts describe normal work, such as “A screenshot was taken”. The wording alone does not mean something bad happened. Ask the person who uses that Mac whether they expected it.
- 3
Read what Cybee already did.
The State line says what happened next. Stopped and quarantined means Cybee ended the program and set it aside on the Mac.
- 4
Ask about it by its id.
Your AI assistant can explain any alert in plain words and tell you what still needs attention.
Ask your AI assistant
Explain my latest alert. What happened, what did Cybee do, and what still needs my attention?
Select the question, then press Command and C.
Where alerts arrive
In the chat, as macOS notifications, in Slack, and on a phone by WhatsApp or SMS, all free. Each alert has the same id wherever it arrives, and each channel has its own severity floor. A Mac notification appears for serious detections if you allow it. To get them in Slack or on your phone, ask your AI assistant to set it up.
What the person at the Mac sees
Your teammates do not open Cybee. They see a notification when something serious happens, if they allowed notifications, and one icon in the menu bar. It opens a card with the Mac’s state and anything waiting for them.
Cybeenow
A program was stopped.
On Ana’s MacBook Pro. It was quarantined.
What the menu bar icon can show
| The card says | What it means |
|---|---|
| Protected | Protection is on and nothing is waiting. |
| Scanning | Cybee is checking this Mac’s settings right now. |
| Needs you | Something waits for a yes, such as a setting to turn on. Nothing changes until the person agrees. |
| Threat stopped | Cybee stopped a program. The card names the alert id. |
| Training due | A security training is waiting. Part of the Cybee subscription. |
| Not observed | Cybee has not heard from this Mac for a while, for example because it was switched off. |
What stays on your Mac
Detection, checks and fixes run on the Mac. Only security facts leave it, so Cybee can answer your questions and send alerts.
| Stays on your Mac | Leaves your Mac |
|---|---|
| The contents of your files | Security events and alerts |
| Saved passwords and app tokens | Which settings are on |
| Spotting and stopping bad software | Which apps, extensions and AI agents are installed, and alerts about what the agents did |
Cybee watches programs, not people. It checks security, not how anyone works. An alert can still name an everyday action, such as a screenshot, and the Mac it happened on. Tell your team that before you add their Macs. Security and privacy details
Check the AI tools too
An AI agent is a program that acts on its own on someone’s Mac. When an alert lands, ask Cybee which agents are on that Mac, what each one is connected to, and which alerts they raised.
Keep your current protection while you try Cybee
If your Macs already run security software or device management, keep it running while you try Cybee. Write down what is installed, with names and versions, and ask us whether they work side by side before you change anything.
Device management, protection and evidence are different jobs. Work through an alert, step by step
If something looks wrong
Find the moment that matches yours.
An alert names a program you use for work
Ask your AI assistant about the alert by its id before you do anything else. If you still think Cybee got it wrong, email [email protected] with the id.
No alert arrives in Slack or on your phone
Ask your AI assistant to set up the channel you want. Serious detections also show a notification on the Mac itself, if notifications are allowed.
The menu bar says Not observed
Cybee has not heard from this Mac. Check that it is switched on and online. The record shows the missing time as not observed.
You want to check that protection is on
In Terminal, type cybee status and press Return. Or ask your AI assistant “Is every Mac protected?”