Security terms. Plain language.

The install saves it on the admin’s Mac, where only that person can read it, with a backup in their iCloud Keychain. Treat it like a password.

at workYou paste it once into a chat app’s connector settings and never into a chat message.

in CybeeA teammate’s Mac holds no admin key and cannot manage the other Macs.

What it can do depends on the tools and the access it has.

at workA coding assistant edits a project file and runs a test.

in CybeeCybee lists the AI agents on each Mac and the tools they connect to, free.

Treat a key that grants access like a password, and check what it allows.

at workAn automation uses a client’s key to read contacts from their CRM.

Installing an app and giving it access are two separate decisions.

at workA calendar tool can read your events but does not need your email.

To check, open the Apple menu and choose About This Mac. If the line Chip names an Apple chip, the Mac has Apple silicon.

at workA studio checks its five Macs before it chooses a security tool.

in CybeeCybee runs on Macs with an Apple chip, M1 or newer, on macOS 15 or newer.

Accounts, installed tools, exposed services and their permissions can all be part of it.

at workA forgotten test app still has access to a shared client folder.

Signing in proves who you are. It does not decide everything you may do once you are in.

at workYou sign in with a passkey before you open your work account.

Being signed in does not automatically give permission to read, change or delete everything.

at workA freelancer can edit one project folder, but cannot manage company accounts.

A backup is only useful if you can restore what you need from it.

at workYou restore a client’s project after its working folder was deleted by mistake.

Its permissions decide which websites and which browser data it can reach.

at workA writing extension may be able to read the text on a client portal you use.

in CybeeCybee lists the browser extensions on each Mac, free.

It gives teams a common reference for checking and improving settings, and almost every compliance framework builds on it.

at workA Mac check compares its screen lock settings with a published recommendation.

in CybeeCybee checks 118 settings on each Mac against the CIS Benchmark, free.

CLI stands for command line interface. Some AI assistants are built this way.

at workA developer starts a coding assistant by typing its name in Terminal.

in CybeeThe install line works in an AI assistant that runs as a CLI.

Its safety depends on how you sign in, what it allows and the apps connected to it.

at workYour work account opens the company files.

A security measure can help meet a requirement, but one tool or report does not prove that every obligation is met.

at workA client asks for device protection, staff training and a written access policy.

A tool can be installed correctly and still have settings that expose more than you intend.

at workA Mac is set to ask for a password when its screen wakes.

Different credentials can open different levels of access.

at workA contractor’s personal login and a shared automation key are two separate credentials.

The name lets you find the same problem across vendor notices and security tools.

at workAn update notice lists a CVE so you can check which versions of the software are affected.

It covers devices, accounts and the decisions people make, and what you do when something goes wrong.

at workKeeping project files safe means protecting both the laptop and the account that shares them.

Knowing a device exists is different from knowing it is connected, checked or protected right now.

at workYour list includes a freelancer’s Mac, but its last report was two weeks ago.

It protects the files on a lost device. It does not stop what someone can do once they are signed in.

at workThe project files on a lost Mac stay encrypted while it is locked.

EDR stands for endpoint detection and response. What it detects and how it responds differs from product to product.

at workA security tool flags an unusual process and gives you a way to look into it.

in CybeeCybee’s protection watches what programs do after they start. If one behaves like malware, Cybee stops it.

In a small team’s security questionnaire, it usually means the work laptops and desktops.

at workThe Mac a designer uses for client work is an endpoint.

in CybeeFor Cybee, an endpoint is a Mac with Apple silicon.

Useful security evidence says what was checked, when it was checked and what was left out.

at workA dated record shows that encryption was on for the three named Macs.

in CybeeFor Cybee, evidence is a dated fact about one setting, recorded by the Mac itself.

It protects the data on the startup disk. Opening it needs the password of an allowed user or a recovery key.

at workA teammate who is leaving hands over the agreed recovery information before returning the Mac.

in CybeeCybee checks that FileVault is on, as one of its 118 safety checks.

It can keep unwanted connections out, but it does not replace updates or account protection.

at workYour Mac can refuse incoming connections to an app you did not allow.

It can mean switching off services you do not use and tightening security settings.

at workYou switch off sharing you do not use and require a password after the screen locks.

in CybeeFor Cybee, hardening means setting your Mac’s own security switches the way the CIS Benchmark says, and keeping them there. The checks and the fixes are free.

IDE stands for integrated development environment. Many have an AI assistant built in.

at workA developer asks the assistant in the code editor to explain a file.

in CybeeThe install line works in the assistant of an IDE, such as Cursor.

An alert is a reason to look closer. It is not automatically a confirmed incident.

at workSomeone uses a stolen work account to download client files.

A good plan makes clear who acts and who needs to be told.

at workYou pause the affected account, keep the logs and contact the person responsible.

Every app that uses the key must be updated too. Creating a new key alone can leave the old one working.

at workAfter a contractor leaves, you replace their automation key and revoke the old one.

Access should stay narrow and be removed when it is no longer needed.

at workA reporting tool can read campaign data, but cannot change billing.

Logs help you work out what happened, but they only hold the events that system captured and kept.

at workAn activity log records when a tool tried to run a command.

It often arrives looking like a useful app or document.

at workA fake download installs a program that steals saved account details.

in CybeeCybee stops malware while it runs, free on every Mac.

MCP stands for Model Context Protocol. A connection that is set up does not prove the tool was used, or that the connection is safe.

at workA coding assistant connects to a tool that searches your project documentation.

It can run on your computer or at an address on the internet.

at workTwo assistants are set up to use the same server for a project’s files.

in CybeeCybee maps which MCP servers each AI tool on a Mac is set up to use.

MFA stands for multi factor authentication. Two passwords are still the same kind of proof.

at workA stolen password alone is not enough to sign in when a second factor is required.

It is not an endorsement of every product claim, and it is not a security audit.

at workA notarized app can still need permissions and a careful look before your team uses it.

in CybeeThe Cybee app for Mac is Apple notarized.

The permissions you approve still need a review.

at workYou let a scheduling app read your calendar, then remove that access later.

They include removing access, getting devices back and handing over shared work.

at workA freelancer finishes, and you review their account, shared folders and automation keys.

It is also the moment to explain the security habits the team expects.

at workBefore Monday, a new designer gets an account, a checked Mac and access to one client project.

It is tied to the service it was made for, which helps it resist phishing.

at workYou approve a sign in with your fingerprint instead of typing a password.

Protect the password manager’s own account with care.

at workYour team shares an approved login through a vault instead of a chat message.

Not every update is a security patch. Installing an update is different from changing settings.

at workA browser update fixes a weakness in the version installed on your Mac.

A person and an app can hold different permissions for the same thing.

at workAn assistant can read a project folder but cannot delete its files.

It often borrows the name of a person or a service you know.

at workAn email that looks like it comes from a client asks you to sign in to a fake file sharing page.

The policy describes what should happen. Separate evidence shows whether it did.

at workYour policy requires a screen lock, and a device check shows whether that setting is on.

It is usually measured against a list of recommended settings, such as the CIS Benchmark.

at workFour Macs are checked, and one of them has its screen lock off.

The risk grows when the assistant can use tools or reach sensitive information.

at workA webpage tells an assistant to ignore its task and send project data elsewhere.

What quarantine prevents depends on the security tool and the item.

at workA suspicious download is taken out of normal use while someone checks it.

An attack can also involve stolen information and a threat to publish it.

at workA team cannot open its project files and receives a payment demand.

A finding matters more when valuable data or important access is involved.

at workAn unused tool with access to every client folder deserves more attention than one with no access.

For evidence, ask which devices and accounts were included, for which dates and for which controls.

at workA report about three Macs does not prove that every cloud account uses MFA.

in CybeeA Trust Passport states its own scope, including what Cybee could not see.

A fingerprint at its foot shows whether the record changed after it was sealed. It does not check the facts a second time.

at workA record sent to a client in March still reads exactly as it did in March.

in CybeeThe Trust Passport is sealed. Sealing is part of the Cybee subscription.

It can point to a real problem, to expected activity or to a detection error. Every alert needs context.

at workA script running on a Mac triggers an alert, and you check who started it and why.

in CybeeCybee sends alerts in the chat, as macOS notifications, in Slack, and on a phone by WhatsApp or SMS, all free, each with an id you can ask about.

It can be technical, such as disk encryption, or organisational, such as an agreed process for removing access.

at workA required screen lock is one control. Checking that it stays on is another task.

Essential changes nothing. Balanced applies CIS Level 1, and Fortress adds Level 2. You pick a level for each Mac, and every change can be undone.

at workThe design team’s Macs run Balanced, and the Mac with the bank login runs Fortress.

in CybeeAll three security levels are free, and nothing changes until you confirm.

Good answers describe what you actually do and name the evidence behind them.

at workA new client asks how work laptops are protected before signing the contract.

Completion records show who took part. They do not guarantee every future decision.

at workA short lesson helps a teammate spot a suspicious request for client files.

in CybeeTraining in Cybee is part of the Cybee subscription, with completion recorded.

Closing a tab may not end the session.

at workYou sign out of a shared computer so the next person cannot use your open account.

The worry is that nobody can see which data it reaches, or who is responsible for it.

at workA teammate tries a new assistant with client files and keeps using it after the trial.

in CybeeCybee lists the AI tools found on each Mac, free.

It helps you find forgotten tools and software that needs an update.

at workYou find an old utility on the studio Mac that nobody remembers installing.

in CybeeCybee keeps this list for every Mac, free.

SSO stands for single sign on. It makes signing in simpler, but it does not replace MFA or careful app permissions.

at workA teammate uses one work identity to open both the project tool and the file service.

Some are useful. Others are forgotten or unwanted.

at workA tool you stopped using still starts a background helper each time you sign in.

That means events, the state of each setting and the list of apps. Never file contents, never passwords or tokens.

at workMira’s MacBook Air reports at 09:42 that its screen lock is on again.

It sits in Applications, in the Utilities folder.

at workYou paste one line into Terminal and press Return.

in CybeeYou can install Cybee in Terminal, and ask it questions there.

A threat may use a weakness. Risk weighs how likely that is and what it would cost you.

at workA criminal group trying stolen passwords is a threat to your work accounts.

A request, an attempt and a finished action are different stages.

at workAn assistant asks to read a file, and its activity record shows whether the tool finished.

in CybeeFor Claude Code and Cursor, Cybee records these with the time, the tool, the action and whether it was attempted or completed.

The Trust Passport is a dated record of how your Macs are protected. Your client or insurer opens it through one link and sees what holds, since when, and what Cybee could not see. It is not a certification or an audit, and it does not answer for your policies, your people or your cloud. It says so on the page.

at workYou share the recorded disk encryption of your Macs with a client, and answer their policy questions separately.

in CybeeThe Trust Passport is part of the Cybee subscription.

It might be a software bug, an unsafe setting or a gap in a process.

at workAn old version of an app has a known flaw that a newer release fixes.