# Security terms. Plain language. > Plain language definitions of device security, AI connections, account access and evidence, each with its meaning, its limits and an everyday example. Page: https://cybee.ai/glossary/ (Security glossary: Mac, AI, MCP and evidence terms) glossary A client’s questionnaire. An app asking for access. A warning on your Mac. Here is what the words mean, each with an example from everyday work. Find a term 68 terms five topics search in English or German The words change. The work is familiar. Endpoint The Mac you work on. Permission What a tool may do. Evidence A fact you can show. ## A ### AI agent AI and connections An AI program that can use tools to carry out tasks, rather than only return text. What it can do depends on the tools and the access it has. at work A coding assistant edits a project file and runs a test. in cybee cybee lists the AI agents on each Mac and the tools they connect to, free. related Tool callMCPPermission [What cybee shows about AI tools](https://cybee.ai/product/ai-agents/)[MCP documentation](https://modelcontextprotocol.io/docs/getting-started/intro) ### API key AI and connections A value an application sends to a service to identify itself or to get access. Treat a key that grants access like a password, and check what it allows. at work An automation uses a client’s key to read contacts from their CRM. related CredentialKey rotationLeast privilege [Find forgotten AI tools](https://cybee.ai/use-cases/ai-tool-sprawl/)[Google Cloud: API keys](https://cloud.google.com/docs/authentication/api-keys) ### App permission Accounts and access A specific action or kind of information an app is allowed to access. Installing an app and giving it access are two separate decisions. at work A calendar tool can read your events but does not need your email. related PermissionOAuthWorkspace app access [Review app access to Google Workspace](https://cybee.ai/use-cases/workspace-app-access/)[Google Workspace app access](https://knowledge.workspace.google.com/admin/apps/control-which-apps-access-google-workspace-data) ### Apple silicon Devices and software The chips Apple makes for its own Macs, such as M1 or M4. To check, open the Apple menu and choose About This Mac. If the line Chip names an Apple chip, the Mac has Apple silicon. If it says Processor and Intel, it does not. at work A studio checks its five Macs before it chooses a security tool. in cybee cybee runs on Macs with Apple silicon. related EndpointTerminal [What cybee needs](https://cybee.ai/docs/requirements/) ### Attack surface Risks and daily habits All the places someone could try to get into your systems or misuse them. Accounts, installed tools, exposed services and their permissions can all be part of it. at work A forgotten test app still has access to a shared client folder. related Shadow AIPermissionVulnerability [Find forgotten AI tools](https://cybee.ai/use-cases/ai-tool-sprawl/)[NIST definition](https://csrc.nist.gov/glossary/term/attack_surface) ### Authentication Accounts and access Checking that someone or something is who it claims to be. Signing in proves who you are. It does not decide everything you may do once you are in. at work You sign in with a passkey before you open your work account. related AuthorisationMFAPasskey [Google Workspace in cybee](https://cybee.ai/product/workspace/)[NIST definition](https://csrc.nist.gov/glossary/term/authentication) ### Authorisation Accounts and access Deciding what a person or app that has signed in may do. Being signed in does not automatically give permission to read, change or delete everything. at work A freelancer can edit one project folder, but cannot manage company accounts. related AuthenticationPermissionLeast privilege [When someone joins or leaves](https://cybee.ai/use-cases/team-changes/)[NIST definition](https://csrc.nist.gov/glossary/term/authorization) ## B ### Backup Devices and software A separate copy of information you can use to recover after loss or damage. A backup is only useful if you can restore what you need from it. at work You restore a client’s project after its working folder was deleted by mistake. in cybee Checking backups and keeping that check as evidence is in build at cybee. related RansomwareIncident responseScope [What is in build](https://cybee.ai/product/roadmap/)[NIST definition](https://csrc.nist.gov/glossary/term/backup) ### Browser extension Devices and software A small program that adds features to your browser. Its permissions decide which websites and which browser data it can reach. at work A writing extension may be able to read the text on a client portal you use. in cybee cybee lists the browser extensions on each Mac, free. related App permissionPermissionSoftware inventory [Browser extension permissions](https://cybee.ai/blog/browser-extension-permissions/)[Chrome extension permissions](https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions) ## C ### CIS Benchmark Devices and software A public, industry maintained list of the safest settings for a system such as macOS. It gives teams a common reference for checking and improving settings, and almost every compliance framework builds on it. at work A Mac check compares its screen lock settings with a published recommendation. in cybee cybee checks 118 settings on each Mac against the CIS Benchmark, free. related ConfigurationHardeningSecurity control [How cybee fixes weak settings](https://cybee.ai/product/#hardening)[CIS Benchmarks](https://www.cisecurity.org/cis-benchmarks) ### CLI Devices and software A program you use by typing commands, usually in Terminal. CLI stands for command line interface. Some AI assistants are built this way. at work A developer starts a coding assistant by typing its name in Terminal. in cybee The install line works in an AI assistant that runs as a CLI. related TerminalIDE [Install guide](https://cybee.ai/docs/install/) ### Cloud account Accounts and access An account for a service that another company runs for you. Its safety depends on how you sign in, what it allows and the apps connected to it. at work Your Google Workspace account opens the company files in Drive. related MFAOAuthWorkspace app access [Google Workspace in cybee](https://cybee.ai/product/workspace/)[Google Workspace app access](https://knowledge.workspace.google.com/admin/apps/control-which-apps-access-google-workspace-data) ### Compliance Proof and requirements Meeting a set of rules or requirements. A security measure can help meet a requirement, but one tool or report does not prove that every obligation is met. at work A client asks for device protection, staff training and a written access policy. related Security controlSecurity questionnaireScope [Answer a client’s questions](https://cybee.ai/use-cases/security-questionnaires/)[NIST security glossary](https://csrc.nist.gov/glossary) ### Configuration Devices and software The settings that decide how a device or an app works. A tool can be installed correctly and still have settings that expose more than you intend. at work A Mac is set to ask for a password when its screen wakes. related HardeningCIS BenchmarkPermission [How cybee fixes weak settings](https://cybee.ai/product/#hardening)[NIST definition](https://csrc.nist.gov/glossary/term/configuration) ### Credential Accounts and access Something that proves who you are or gets you access, such as a password, a token or a certificate. Different credentials can open different levels of access. at work A contractor’s personal login and a shared automation key are two separate credentials. related API keyAuthenticationKey rotation [When someone joins or leaves](https://cybee.ai/use-cases/team-changes/)[NIST definition](https://csrc.nist.gov/glossary/term/credential) ### CVE Devices and software A shared name for a publicly known security weakness in software. The name lets you find the same problem across vendor notices and security tools. at work An update notice lists a CVE so you can check which versions of the software are affected. related VulnerabilityPatchSoftware inventory [How cybee protects a Mac](https://cybee.ai/product/#protection)[CVE Program](https://www.cve.org/About/Overview) ### Cybersecurity Risks and daily habits Protecting computers, information and the work that depends on them. It covers devices, accounts and the decisions people make, and what you do when something goes wrong. at work Keeping project files safe means protecting both the laptop and the account that shares them. related Security controlRiskIncident response [What cybee does](https://cybee.ai/product/)[NIST security glossary](https://csrc.nist.gov/glossary) ## D ### Device inventory Devices and software A list of the devices your organisation knows about. Knowing a device exists is different from knowing it is connected, checked or protected right now. at work Your list includes a freelancer’s Mac, but its last report was two weeks ago. related EndpointSoftware inventoryScope [When someone joins or leaves](https://cybee.ai/use-cases/team-changes/)[CIS Controls: asset inventories](https://www.cisecurity.org/controls/inventory-and-control-of-enterprise-assets) ### Disk encryption Devices and software Scrambling the data on a drive so it can only be read with the right key. It protects the files on a lost device. It does not stop what someone can do once they are signed in. at work The project files on a lost Mac stay encrypted while it is locked. related FileVaultSecurity controlEvidence [How cybee fixes weak settings](https://cybee.ai/product/#hardening)[Apple Platform Security](https://support.apple.com/en-gb/guide/security/sec4c6dc1b6e/web) ## E ### EDR Devices and software Software that watches what happens on computers, to help spot suspicious behaviour and respond to it. EDR stands for endpoint detection and response. What it detects and how it responds differs from product to product. at work A security tool flags an unusual process and gives you a way to look into it. in cybee cybee’s protection watches what programs do after they start. If one behaves like malware, cybee stops it. related EndpointSecurity alertQuarantine [How cybee protects a Mac](https://cybee.ai/product/#protection)[CISA: device monitoring (PDF)](https://www.cisa.gov/sites/default/files/publications/cdm-technical-capabilities-vol2-v24.pdf) ### Endpoint Devices and software A computer someone works on. In a small team’s security questionnaire, it usually means the work laptops and desktops. at work The Mac a designer uses for client work is an endpoint. in cybee For cybee, an endpoint is a Mac with Apple silicon. related EDRDevice inventoryHardening [How cybee protects a Mac](https://cybee.ai/product/#protection)[NIST definition](https://csrc.nist.gov/glossary/term/endpoint) ### Evidence Proof and requirements Information that backs up a specific statement. Useful security evidence says what was checked, when it was checked and what was left out. at work A dated record shows that encryption was on for the three named Macs. in cybee For cybee, evidence is a dated fact about one setting, recorded by the Mac itself. related ScopeSecurity controlTrust Passport [What the Trust Passport shows](https://cybee.ai/product/#trust-passport)[NIST security glossary](https://csrc.nist.gov/glossary) ## F ### FileVault Devices and software The disk encryption built into macOS. It protects the data on the startup disk. Opening it needs the password of an allowed user or a recovery key. at work A teammate who is leaving hands over the agreed recovery information before returning the Mac. in cybee cybee checks that FileVault is on, as one of its 118 safety checks. related Disk encryptionCredentialOffboarding [How cybee fixes weak settings](https://cybee.ai/product/#hardening)[Apple Platform Security](https://support.apple.com/en-gb/guide/security/sec4c6dc1b6e/web) ### Firewall in build at cybee Devices and software A control that allows or blocks network connections by a set of rules. It can keep unwanted connections out, but it does not replace updates or account protection. at work Your Mac can refuse incoming connections to an app you did not allow. related Security controlConfigurationHardening [What is in build](https://cybee.ai/product/roadmap/)[NIST definition](https://csrc.nist.gov/glossary/term/firewall) ## H ### Hardening Devices and software Changing settings so a system is harder to misuse. It can mean switching off services you do not use and tightening security settings. at work You switch off sharing you do not use and require a password after the screen locks. in cybee For cybee, hardening means setting your Mac’s own security switches the way the CIS Benchmark says, and keeping them there. The checks are free. Setting the switches and keeping them there is part of the Proof plan. related ConfigurationCIS BenchmarkPatch [How cybee fixes weak settings](https://cybee.ai/product/#hardening)[NIST definition](https://csrc.nist.gov/glossary/term/hardening) ## I ### IDE Devices and software An app developers write code in. IDE stands for integrated development environment. Many have an AI assistant built in. at work A developer asks the assistant in the code editor to explain a file. in cybee The install line works in the assistant of an IDE, such as Cursor. related CLITerminal [Install guide](https://cybee.ai/docs/install/) ### Incident Risks and daily habits An event that harms, or threatens to harm, the security of systems or information. An alert is a reason to look closer. It is not automatically a confirmed incident. at work Someone uses a stolen work account to download client files. related Security alertIncident responseLog [Understand an alert](https://cybee.ai/use-cases/security-alerts/)[NIST definition](https://csrc.nist.gov/glossary/term/incident) ### Incident response Risks and daily habits The planned steps to understand, contain and recover from a security incident. A good plan makes clear who acts and who needs to be told. at work You pause the affected account, keep the logs and contact the person responsible. in cybee An incident response plan is part of the Proof plan. related IncidentLogBackup [Understand an alert](https://cybee.ai/use-cases/security-alerts/)[NIST definition](https://csrc.nist.gov/glossary/term/incident_response) ## K ### Key rotation Accounts and access Replacing an access key and retiring the old one. Every app that uses the key must be updated too. Creating a new key alone can leave the old one working. at work After a contractor leaves, you replace their automation key and revoke the old one. related API keyOffboardingCredential [When someone joins or leaves](https://cybee.ai/use-cases/team-changes/)[Google Cloud: API key practices](https://cloud.google.com/docs/authentication/api-keys-best-practices) ## L ### Least privilege Accounts and access Giving a person or tool only the access its task needs. Access should stay narrow and be removed when it is no longer needed. at work A reporting tool can read campaign data, but cannot change billing. related PermissionAuthorisationOffboarding [Review app access to Google Workspace](https://cybee.ai/use-cases/workspace-app-access/)[NIST definition](https://csrc.nist.gov/glossary/term/least_privilege) ### Log Proof and requirements A record of events that a system reports. Logs help you work out what happened, but they only hold the events that system captured and kept. at work An activity log records when a tool tried to run a command. related Tool callEvidenceIncident [What cybee shows about AI tools](https://cybee.ai/product/ai-agents/)[NIST definition](https://csrc.nist.gov/glossary/term/log) ## M ### Malware Risks and daily habits Software built to harm systems, steal information or do things you did not want. It often arrives looking like a useful app or document. at work A fake download installs a program that steals saved account details. in cybee cybee stops malware while it runs, free on every Mac. related RansomwareEDRQuarantine [How cybee protects a Mac](https://cybee.ai/product/#protection)[NIST definition](https://csrc.nist.gov/glossary/term/malware) ### MCP AI and connections The open standard that lets an AI assistant use a tool, such as cybee. MCP stands for Model Context Protocol. A connection that is set up does not prove the tool was used, or that the connection is safe. at work A coding assistant connects to a tool that searches your project documentation. related MCP serverAI agentTool call [What cybee shows about AI tools](https://cybee.ai/product/ai-agents/)[MCP documentation](https://modelcontextprotocol.io/docs/getting-started/intro) ### MCP server AI and connections A program that offers tools, information or prompts to an AI assistant through MCP. It can run on your computer or at an address on the internet. at work Two assistants are set up to use the same server for a project’s files. in cybee cybee maps which MCP servers each AI tool on a Mac is set up to use. related MCPPermissionTool call [Find forgotten AI tools](https://cybee.ai/use-cases/ai-tool-sprawl/)[MCP documentation](https://modelcontextprotocol.io/docs/learn/architecture) ### MFA Accounts and access Signing in with more than one kind of proof, such as a password and a security key. MFA stands for multi factor authentication. Two passwords are still the same kind of proof. at work A stolen password alone is not enough to sign in when a second factor is required. related AuthenticationPasskeySSO [Google Workspace in cybee](https://cybee.ai/product/workspace/)[NIST definition](https://csrc.nist.gov/glossary/term/multi_factor_authentication) ## N ### Notarization Devices and software Apple’s automated check of Mac software for known malicious content and certain signing problems. It is not an endorsement of every product claim, and it is not an independent security audit. at work A notarized app can still need permissions and a careful look before your team uses it. in cybee The cybee app for Mac is Apple notarized. related MalwareApp permissionScope [What leaves your Mac](https://cybee.ai/security/)[Apple: notarization](https://developer.apple.com/documentation/security/notarizing-macos-software-before-distribution) ## O ### OAuth Accounts and access A standard way to give an app limited access to a service without handing over your password. The permissions you approve still need a review. at work You let a scheduling app read your calendar, then remove that access later. related App permissionScopeWorkspace app access [Review app access to Google Workspace](https://cybee.ai/use-cases/workspace-app-access/)[Google OAuth documentation](https://developers.google.com/identity/protocols/oauth2) ### Offboarding Accounts and access The steps you take when someone leaves a company or a project. They include removing access, getting devices back and handing over shared work. at work A freelancer finishes, and you review their account, shared folders and automation keys. related OnboardingKey rotationPermission [When someone joins or leaves](https://cybee.ai/use-cases/team-changes/)[NIST security glossary](https://csrc.nist.gov/glossary) ### Onboarding Accounts and access The setup that lets a new teammate start with the right devices, accounts and access. It is also the moment to explain the security habits the team expects. at work Before Monday, a new designer gets an account, a checked Mac and access to one client project. related OffboardingLeast privilegeSecurity training [When someone joins or leaves](https://cybee.ai/use-cases/team-changes/)[NIST security glossary](https://csrc.nist.gov/glossary) ## P ### Passkey Accounts and access A way to sign in that uses a cryptographic key pair instead of a shared password. It is tied to the service it was made for, which helps it resist phishing. at work You approve a sign in with your fingerprint instead of typing a password. related AuthenticationMFAPhishing [Security training in cybee](https://cybee.ai/product/training/)[Apple: passkeys](https://support.apple.com/102195) ### Password manager Accounts and access A tool that creates and stores passwords, so each account can have its own strong one. Protect the password manager’s own account with care. at work Your team shares an approved login through a vault instead of a chat message. related CredentialMFAPasskey [Security training in cybee](https://cybee.ai/product/training/)[CISA: password managers](https://www.cisa.gov/resources-tools/training/cyb3rsmrt-use-password-manager-create-and-remember-strong-passwords) ### Patch Devices and software A software change that fixes a problem, sometimes a security weakness. Not every update is a security patch. Installing an update is different from changing settings. at work A browser update fixes a weakness in the version installed on your Mac. related VulnerabilityCVEHardening [How cybee protects a Mac](https://cybee.ai/product/#protection)[NIST definition](https://csrc.nist.gov/glossary/term/patch) ### Permission Accounts and access An allowed action on something, such as reading a file or changing an account. A person and an app can hold different permissions for the same thing. at work An assistant can read a project folder but cannot delete its files. related AuthorisationLeast privilegeApp permission [Review app access to Google Workspace](https://cybee.ai/use-cases/workspace-app-access/)[NIST definition](https://csrc.nist.gov/glossary/term/authorization) ### Phishing Risks and daily habits A deceptive message or website made to get someone to reveal information or do something harmful. It often borrows the name of a person or a service you know. at work An email that looks like it comes from a client asks you to sign in to a fake file sharing page. related CredentialPasskeySecurity training [Security training in cybee](https://cybee.ai/product/training/)[NIST definition](https://csrc.nist.gov/glossary/term/phishing) ### Policy Proof and requirements A written rule for how your organisation expects something to be handled. The policy describes what should happen. Separate evidence shows whether it did. at work Your policy requires a screen lock, and a device check shows whether that setting is on. related Security controlEvidenceCompliance [Answer a client’s questions](https://cybee.ai/use-cases/security-questionnaires/)[NIST security glossary](https://csrc.nist.gov/glossary) ### Posture Devices and software How well a Mac, or all of your Macs, is set up right now. It is usually measured against a list of recommended settings, such as the CIS Benchmark. at work Four Macs are checked, and one of them has its screen lock off. related CIS BenchmarkConfigurationEvidence [How cybee fixes weak settings](https://cybee.ai/product/#hardening) ### Prompt injection AI and connections Instructions hidden in content that try to pull an AI assistant away from its task. The risk grows when the assistant can use tools or reach sensitive information. at work A webpage tells an assistant to ignore its task and send project data elsewhere. related AI agentPermissionTool call [What cybee shows about AI tools](https://cybee.ai/product/ai-agents/)[OWASP prompt injection guidance](https://owasp.org/www-community/attacks/PromptInjection) ## Q ### Quarantine Devices and software Moving a suspicious file or item aside, so it can do less harm while someone reviews it. What quarantine prevents depends on the security tool and the item. at work A suspicious download is taken out of normal use while someone checks it. related MalwareEDRSecurity alert [How cybee protects a Mac](https://cybee.ai/product/#protection)[NIST security glossary](https://csrc.nist.gov/glossary) ## R ### Ransomware Risks and daily habits Malicious software used to demand payment, often by locking or encrypting files. An attack can also involve stolen information and a threat to publish it. at work A team cannot open its project files and receives a payment demand. related MalwareBackupIncident response [How cybee protects a Mac](https://cybee.ai/product/#protection)[CISA: ransomware guide](https://www.cisa.gov/stopransomware/ransomware-guide) ### Risk Risks and daily habits The chance of harm, weighed by how likely it is and how much it would affect your work. A finding matters more when valuable data or important access is involved. at work An unused tool with access to every client folder deserves more attention than one with no access. related ThreatVulnerabilityAttack surface [Understand an alert](https://cybee.ai/use-cases/security-alerts/)[NIST definition](https://csrc.nist.gov/glossary/term/risk) ## S ### Scope Proof and requirements The boundary of what a check, a permission or a report covers. For evidence, ask which devices and accounts were included, for which dates and for which controls. at work A report about three Macs does not prove that every cloud account uses MFA. in cybee A Trust Passport states its own scope, including what cybee could not see. related EvidenceTrust PassportCompliance [What the Trust Passport shows](https://cybee.ai/product/#trust-passport)[NIST security glossary](https://csrc.nist.gov/glossary) ### Sealed Proof and requirements Locked so that any later change would show. Your client opens one link and can check that the record is exactly what was sent. at work A record sent to a client in March still reads exactly as it did in March. in cybee The Trust Passport is sealed. Sealing is part of the Proof plan. related Trust PassportEvidenceScope [What the Trust Passport shows](https://cybee.ai/product/#trust-passport) ### Security alert Risks and daily habits A notification that something may need a closer look. It can point to a real problem, to expected activity or to a detection error. Every alert needs context. at work A script running on a Mac triggers an alert, and you check who started it and why. in cybee cybee sends alerts as a macOS notification, in Slack or Teams, or by SMS, each with an id you can ask about. related IncidentLogEDR [Understand an alert](https://cybee.ai/use-cases/security-alerts/)[NIST security glossary](https://csrc.nist.gov/glossary) ### Security control Proof and requirements One measure that lowers a security risk. It can be technical, such as disk encryption, or organisational, such as an agreed process for removing access. at work A required screen lock is one control. Checking that it stays on is another task. related PolicyEvidenceCIS Benchmark [What the Trust Passport shows](https://cybee.ai/product/#trust-passport)[NIST definition](https://csrc.nist.gov/glossary/term/security_control) ### Security questionnaire Proof and requirements A list of questions a client, partner or insurer uses to understand how you handle security. Good answers describe what you actually do and name the evidence behind them. at work A new client asks how work laptops are protected before signing the contract. related EvidenceScopeCompliance [Answer a client’s questions](https://cybee.ai/use-cases/security-questionnaires/)[NIST security glossary](https://csrc.nist.gov/glossary) ### Security training Risks and daily habits Practical lessons that help people make safer decisions at work. Completion records show who took part. They do not guarantee every future decision. at work A short lesson helps a teammate spot a suspicious request for client files. in cybee Training in cybee is part of the Proof plan, with completion recorded. related PhishingOnboardingEvidence [Security training in cybee](https://cybee.ai/product/training/)[CISA everyday security guidance](https://www.cisa.gov/resources-tools/resources/secure-our-world-cybersecurity-awareness-month-resources) ### Session Accounts and access The time you stay signed in to a service, usually kept open by a cookie or a token. Closing a tab may not end the session. at work You sign out of a shared computer so the next person cannot use your open account. related AuthenticationCredentialOffboarding [When someone joins or leaves](https://cybee.ai/use-cases/team-changes/)[NIST: sessions](https://pages.nist.gov/800-63-4/sp800-63b/session/) ### Shadow AI AI and connections AI tools used for work without the organisation knowing enough about them or approving them. The worry is that nobody can see which data it reaches, or who is responsible for it. at work A teammate tries a new assistant with client files and keeps using it after the trial. in cybee cybee lists the AI tools found on each Mac, free. related AI agentAttack surfacePermission [Find forgotten AI tools](https://cybee.ai/use-cases/ai-tool-sprawl/)[NIST security glossary](https://csrc.nist.gov/glossary) ### Software inventory Devices and software A list of the apps on a device or across a team, usually with their versions. It helps you find forgotten tools and software that needs an update. at work You find an old utility on the studio Mac that nobody remembers installing. in cybee cybee keeps this list for every Mac, free. related Device inventoryPatchBrowser extension [What cybee shows about AI tools](https://cybee.ai/product/ai-agents/)[CIS Controls: software inventories](https://www.cisecurity.org/controls/inventory-and-control-of-software-assets) ### SSO Accounts and access Using one identity service to sign in to several apps. SSO stands for single sign on. It makes signing in simpler, but it does not replace MFA or careful app permissions. at work A teammate uses one work identity to open both the project tool and the file service. related AuthenticationMFAOffboarding [Google Workspace in cybee](https://cybee.ai/product/workspace/)[NIST definition](https://csrc.nist.gov/glossary/term/single_sign_on) ### Startup item Devices and software An app or background task set to run when a computer starts, when someone signs in or on another trigger. Some are useful. Others are forgotten or unwanted. at work A tool you stopped using still starts a background helper each time you sign in. related Software inventoryConfigurationMalware [What cybee shows about AI tools](https://cybee.ai/product/ai-agents/)[Apple: login items](https://support.apple.com/guide/mac-help/open-items-automatically-when-you-log-in-mh15189/mac) ## T ### Telemetry Devices and software The security facts a Mac sends to cybee. That means events, the state of each setting and the list of apps. Never file contents, never passwords or tokens. at work Mira’s MacBook Air reports at 09:42 that its screen lock is on again. related EvidenceLogScope [What leaves your Mac](https://cybee.ai/security/) ### Terminal Devices and software The app on every Mac where you type commands instead of clicking. It sits in Applications, in the Utilities folder. at work You paste one line into Terminal and press Return. in cybee You can install cybee in Terminal, and ask it questions there. related CLIApple silicon [Install guide](https://cybee.ai/docs/install/) ### Threat Risks and daily habits Anything that could harm your systems, information or work. A threat may use a weakness. Risk weighs how likely that is and what it would cost you. at work A criminal group trying stolen passwords is a threat to your work accounts. related RiskVulnerabilityMalware [How cybee protects a Mac](https://cybee.ai/product/#protection)[NIST definition](https://csrc.nist.gov/glossary/term/threat) ### Tool call AI and connections A request from an AI assistant to run a tool, such as reading a file or running a command. A request, an attempt and a finished action are different stages. at work An assistant asks to read a file, and its activity record shows whether the tool finished. in cybee cybee records these with the time, the tool, the action and whether it was attempted or completed. related AI agentMCP serverLog [What cybee shows about AI tools](https://cybee.ai/product/ai-agents/)[MCP documentation](https://modelcontextprotocol.io/docs/learn/server-concepts) ### Trust Passport Proof and requirements cybee’s sealed, dated record of the security settings on your Macs, shared as one link your client can check. The Trust Passport is a dated record of how your Macs are protected. Your client or insurer opens it through one link and sees what holds, since when, and what cybee could not see. It is not a certification or an audit, and it does not answer for your policies, your people or your cloud. It says so on the page. at work You share the recorded disk encryption of your Macs with a client, and answer their policy questions separately. in cybee The Trust Passport is part of the Proof plan. related EvidenceScopeSealed [What the Trust Passport shows](https://cybee.ai/product/#trust-passport)[Read a Trust Passport](https://cybee.ai/docs/trust-passport/) ## V ### Vulnerability Devices and software A weakness that could be used to harm a system or information. It might be a software bug, an unsafe setting or a gap in a process. at work An old version of an app has a known flaw that a newer release fixes. related CVEPatchRisk [How cybee protects a Mac](https://cybee.ai/product/#protection)[NIST definition](https://csrc.nist.gov/glossary/term/vulnerability) ## W ### Workspace app access Accounts and access The permissions that connected apps hold over your Google Workspace data. These grants deserve their own review, even when everyone signs in safely. at work An old meeting tool can still read the calendar after the team stopped using it. related OAuthApp permissionOffboarding [Review app access to Google Workspace](https://cybee.ai/use-cases/workspace-app-access/)[Google Workspace app access](https://knowledge.workspace.google.com/admin/apps/control-which-apps-access-google-workspace-data) ## Simple words. Careful definitions. Written by cybee for people who run small teams. We check technical meanings against the references here, then explain them in our own words. The examples are made up. Definitions reviewed 21 September 2026 and references updated 24 September 2026. Wording edited for plain language on 28 September 2026. A definition describes a concept, not necessarily a feature offered by cybee. [NIST security glossary The security glossary of the US National Institute of Standards and Technology.](https://csrc.nist.gov/glossary) [Apple Platform Security How Apple describes the security built into its devices.](https://support.apple.com/guide/security/welcome/web) [MCP documentation The open standard that connects AI assistants to tools.](https://modelcontextprotocol.io/docs/getting-started/intro) [Google Workspace app access Google’s guide to the apps that can reach Workspace data.](https://knowledge.workspace.google.com/admin/apps/control-which-apps-access-google-workspace-data) [CIS Benchmarks The published lists of recommended security settings.](https://www.cisecurity.org/cis-benchmarks) [CIS Controls: asset inventories Why teams keep a list of their devices and software.](https://www.cisecurity.org/controls/cis-controls-navigator) [CISA everyday security guidance Everyday habits from the US cybersecurity agency.](https://www.cisa.gov/resources-tools/resources/secure-our-world-cybersecurity-awareness-month-resources) [OWASP prompt injection guidance How hidden instructions can redirect an AI assistant.](https://owasp.org/www-community/attacks/PromptInjection) ## Now put it in context. Understand a warning, review your team’s tools or prepare for a client’s questions. [Understand an alert What a warning on a Mac means, and what to do before you act.](https://cybee.ai/use-cases/security-alerts/) [Find forgotten AI tools The assistants and connections still set up on your Macs.](https://cybee.ai/use-cases/ai-tool-sprawl/) [Answer client questions A client’s security questionnaire, answered from dated facts.](https://cybee.ai/use-cases/security-questionnaires/) ## Your next client will ask. Be ready. `curl -sSf https://get.cybee.dev | sh` Run it in Terminal, a chat, your IDE or a CLI. Keep working where you started. Free for every Mac with an Apple chip · Asks before it changes your Mac [What it installs](https://cybee.ai/docs/install/#see) [Read the install script](https://get.cybee.dev)