Good questions.
Straight answers.
What cybee does, what it does not do and what to know before connecting a Mac.
Something we have not answered?
[email protected]The essentials
Is cybee security software or a compliance tool?
cybee brings device protection, hardening and a dated technical record together. The record supports security reviews. It does not replace protection, organisational policies or an auditor.
What is free?
Protection, alerts, the CIS posture score, unsealed reports, software, browser extension and AI tool inventories, connected Google Workspace visibility and email support are part of the free plan. Applying and maintaining hardening and sealing a Trust Passport belong to the paid plan.
Which devices does it cover?
Supported Macs. Intel Macs, iPhone, iPad and servers are not supported. Windows and Linux are in development. Exact macOS and hardware requirements need confirmation before connecting a real device. See the roadmap.
Do I need to work in the terminal?
You can start in Chat, CLI, IDE or Terminal. To use an assistant, confirm its connection to your Mac first. Then ask questions and review proposed changes there.
Protection and changes
How does hardening differ from detection?
Detection looks for suspicious behaviour and known threats. Hardening changes supported settings to reduce weaknesses in a Mac’s configuration. One does not replace the other, and neither makes a device impossible to compromise.
Can Chat change my Mac without confirmation?
A change invoked from Chat requires the owner’s confirmation. Read the action, the affected device and the expected effect. A proposed action or a pasted document is not permission to change a Mac.
What can I see about our AI tools?
See the AI tools found on a Mac, their mapped external connections and recorded tool actions with times and phases. Review that context alongside protection and security settings. Explore AI visibility.
Does cybee restrict what an AI agent can do?
No. AI inventory, mapped connections and recorded activity provide visibility. They do not restrict permissions or guarantee every action is captured. Limits on the credentials each agent can use remain planned.
Where do security alerts arrive?
Alerts can reach the admin through Slack, Microsoft Teams or SMS. Ask your assistant about the finding and any next step. A delivered notification is not proof that an issue was resolved, and does not approve an action.
Should I remove my existing security tools?
No. Keep the existing setup while compatibility is checked. cybee is intended to work alongside other tools. An endpoint product, an MDM and a technical evidence record serve different jobs.
Data and privacy
What runs on the Mac, and what leaves it?
Threat detection, hardening and fixes run on the Mac. Security events, settings, software inventories and alerts can leave as telemetry. File inspection happens locally. The final privacy policy must confirm retention and subprocessors.
Can cybee be used to monitor employees?
cybee checks programs and security settings. It does not track employee productivity. Admins see security summaries and alerts.
Does my AI provider see the answers?
Yes. Summaries, tables and verdicts requested through your assistant pass through that provider under its terms. What the assistant displays, its provider has seen. This is a separate boundary from local device detection.
Can I request a Data Processing Agreement?
Email [email protected] to request the Data Processing Agreement and details of data retention and subprocessors. The approved documents are not yet published in this preview.
Proof and its limits
What does a Trust Passport prove?
It is a dated record of technical controls on the listed, assessed Macs. It shows observations and coverage gaps. The recipient can check that the page has not changed since sealing against cybee’s sealed copy. That is integrity checking, not an independent audit.
Will a client accept it?
The client decides. The Passport supports the device questions with facts and dates. It is not a certification or a guarantee of acceptance. Requests about policies, people, accounts and other excluded areas need separate evidence.
What if one Mac is missing?
It stays unassessed. A score is shown with “assessed on N of M Macs”. A missing device does not become a passing result or disappear from the coverage question.
Does cybee cover Google Workspace and MFA?
Yes. Connected accounts have their own record of activity and multi-factor authentication (MFA) settings. Visibility is free; sealed account and offboarding records are paid. This account evidence is separate from the Mac observations and does not cover personal Gmail, Apple ID or other cloud services. Microsoft 365 is in development. Explore Google Workspace security.
Can I revoke or export a record?
The owner can revoke a Passport link. Evidence data can be exported through the assistant. A sealed page stays unchanged, but access to the link depends on the active plan and the grace period after it ends. The grace period length needs confirmation.
Security training
What does security training cover?
Short modules for AI assistants and agents, secrets in code and terminals, fake installer prompts and password theft, SaaS sharing and OAuth permissions, and device loss. Training includes onboarding, annual refresh and role-specific learning. Explore security training.
Which plan includes training?
Security awareness training is included in the paid plan. Assign short modules through your assistant and track completion. Free device protection remains available without a paid plan. Explore how training works.
Does the current Passport include training completion?
No. The current Trust Passport records scoped device observations; it does not contain training evidence. Training completion is recorded separately. Completing a module does not certify a company or complete an audit.
Plans and billing
How much does the paid plan cost?
9 per Mac per month, or 90 per year. CHF, EUR and USD use the same face value. Tax is excluded and added by country at invoicing. The annual plan saves 16.7% (18) compared with twelve monthly payments.
Is the price per person or per Mac?
Per Mac on the paid plan. One person with two Macs on that plan pays for two devices. The free plan has no Mac or user limit within supported product scope.
What changes if I stop paying?
No new sealed Passports are created. Applied hardening remains, but ongoing repair of drift stops. After the grace period the account returns to free and previously sent Passport links stop working. The duration of that grace period needs confirmation before final billing terms.
What support is included?
The paid plan includes 24/7 chat support. The free plan includes email support.
Are custom arrangements possible?
Yes. Contact the team about enterprise, franchise, insurer or managed service provider arrangements.
No matching answer.
Try a shorter phrase or email [email protected].
The Passport has a defined scope.
What the record covers
- Listed, assessed Macs
- Encryption and endpoint protection with dates
- Applications, screen lock, extensions and AI tools
What needs separate evidence
- Google Workspace accounts and MFA in the account record
- Backups, training completion and incident plan
- Policies, code, suppliers and people
Connected Google Workspace accounts have a separate record. Training is included in the paid plan. Backup verification and the incident plan are in development. The device Passport is not a certification or an audit opinion.
Read the full scope definition
On a typical questionnaire the passport answers, with dates, the questions about your Macs: disk encryption on every listed Mac; endpoint protection that watches behaviour, and since when; the patch status of your applications; screen lock and password on wake; the browser extensions and AI tools installed. Connected Google Workspace accounts and their MFA settings have a separate account record. They are not part of this device Passport. Backups, training completion and the incident plan also need separate evidence. This record never answers for your policies, code, suppliers or people. It says so on the page.
The next step is one command.
Protect your Mac, strengthen its settings and keep a dated record of the results.
For supported Macs. cybee is a Swiss company, independent, privacy first.
curl -sSf https://get.cybee.dev | sh