Swiss. Independent. Privacy first.
Protect the work.
Prove the protection.
Detect suspicious activity, fix weak settings and show what was checked.
See your AI agents, their connections and recorded activity alongside Mac protection and Google Workspace. Ask about it in the assistant you already use.
curl -sSf https://get.cybee.dev | shA record of security work. Not a certificate of safety.
Know the agents.
Follow the connections.
Security needs to account for the tools doing the work.
See installed agents, their MCP connections and recorded activity on supported Macs. MCP connects an assistant to tools and services.
Explore AI agentsVisibility helps you review the setup. Per agent credential restrictions remain planned.
Watch programs.
Protect the business.
A familiar name is not enough to decide whether a program is safe.
cybee checks how programs behave, looks for known threats and inspects content on the Mac. Endpoint detection and response (EDR) helps you investigate suspicious activity and respond.
It watches programs, not employee productivity.
Understand protection and alerts- Observe the behaviour09:41
A process repeatedly attempts to change a security setting.
- Review the context09:42
Identify the device, process and possible effect. Legitimate administration is still possible.
- Approve the response09:44
Review the proposed action and affected device before approving it.
Detection and hardening do different jobs. Neither makes compromise impossible.
Find weak settings.
Make them stronger.
Hardening means applying safer settings from the CIS Benchmark, a public security guide. Checking is free. Applying and maintaining supported settings is paid.
From a weak setting
to a recorded change.
Before approval, review the change, its effect and how to reverse it.
Screen lock delay
- Affected scope
- One named Mac
- Possible effect
- Earlier screen lock while away
- Approval
- Required before this sample action
- Verification
- Check the resulting setting
An example of the decision, not an instruction to change this device.
Show what was checked.
And when.
A client needs more than “we take security seriously.”
The Trust Passport is a dated record of security settings on assessed Macs. It shows how long each setting has held and which devices could not be checked.
Sealing locks the record. A recipient can check it against cybee’s copy to see whether it changed. This is not an independent audit or a certification.
Read a Trust Passport
Trust PassportIllustrativeNorthstar Studio
09–16 SEP 2026
- Disk encryption
- Observed on 7 Macs
- Last checked
- 16 SEP · 09:41 UTC
- Evidence source
- Synthetic observations
- Seal
- Unsigned example
This sample is not a real assessment or a sealed product output.
Device facts, with dates.
Encryption, protection status, application patch status, screen lock, extensions and installed AI tools. Only for the Macs actually assessed.
Other evidence still matters.
This device example excludes accounts, backups and training. Connected Google Workspace has its own accounts record. Policies, code, suppliers and people need separate evidence.
Read the full questionnaire coverage
On a typical questionnaire the passport answers, with dates, the questions about your Macs: disk encryption on every listed Mac; endpoint protection that watches behaviour, and since when; the patch status of your applications; screen lock and password on wake; the browser extensions and AI tools installed. This device record does not cover accounts, MFA, backups, training completion or an incident plan. Connected Google Workspace adds an accounts record for that organisation. Personal accounts and unrelated services remain outside its scope. Policies, code, suppliers and people need their own evidence.
“Which devices need attention?”
Seven Macs are reporting. One setting needs approval. One alert needs review. An eighth Mac has no observation.
Example conversation. Individual assistant connections require release confirmation.
The conversation
is the interface.
Ask for the situation. Review the action. Get the record.
Ask questions in your usual assistant. cybee checks permissions before acting; a suggestion alone does not approve a change.
Using your assistant to ask cybee a question is one thing. Seeing the other agents and tool connections on your Mac is another. cybee gives you both views.
How assistant permissions workYour accounts.
Part of the picture.
See sign ins, app access and admin changes in Google Workspace. Connect account activity with what happens on the Mac.
Explore Google WorkspaceTwo sources. More context for the same decision.
Security events and permissions. No email or document contents.A useful alert.
A clear next step.
Share security alerts through Slack, Teams or SMS. Review the finding in your assistant and record who decided what, and when.
- 01
Security alert
A finding with a device or account context and an alert ID. - 02
Your chosen channel
SlackTeamsSMS - 03
Ask your assistant
Use the alert ID to understand the finding and review the next action. - 04
Keep the decision
A record of who reviewed it, when, and what they decided.
Sharing an alert does not authorise a device change. Sensitive actions still require approval.
Understand alerts and responseHelp the team
make safer calls.
Short modules for the decisions behind the work: installer prompts, shared files, secrets and agent access. Assign training through your assistant and keep track of completion.
See the gap.
See the action. See the proof.
Try the workflow below.
Every result is sample data.
No account or device connection.
Check what
is supported.
The device comes first.
The product starts with supported Macs. Intel Macs, iPhones, iPads and servers are outside the supported scope.
More is in build.
Microsoft 365 and Windows and Linux agents are in development. AI visibility, Google Workspace and sharing alerts through Slack, Teams and SMS are available.
Explore the roadmapSecurity still has limits.
Hardening reduces exposure. Detection can miss activity. A technical record does not replace policies, organisational controls or an audit.
Stronger security.
Proof built in.
Protection for your devices. A record of the work.
curl -sSf https://get.cybee.dev | shCopying the command does not install anything.