Cybee
Needs your review. AI agent tried to run a destructive command.Luca’s Mac · just now
Severity
High
What Cybee did
Recorded, not stopped
Reviewed
Not yet
- Who did it
- Claude Code, running a command
AI agents on your Macs
AI uses your Mac. See what it is set up to reach.
Cybee lists the AI tools on every Mac your team works on, what each one is connected to and alerts about what they did.
Send the setup guide to my Mac
Step by step, for your Mac. By AirDrop, message or email.
curl -sSf https://get.cybee.dev | shFrom get.cybee.dev, Cybee’s install server. Read the script
Run it in Terminal, a chat, your IDE or a CLI. Keep working where you started.Press Command and C to copy.
What the command does
- Installs a notarized agent on this Mac.
- Creates no account. The install is identified by a token.
- Starts protecting the device at once.
- Changes no setting until you confirm it in your AI assistant.
- Asks for this Mac’s administrator password once, and for no email address.
Which AI tools are on Ana’s MacBook Pro, and what are they connected to?
Used Cybee
Cybee09:41
Four AI tools. Three connections set up.
- AI tools
- 4
- Connections
- 3
- Recorded
- 2 actions
Codex is still connected to old_demo.
Still needed? Ask Ana, who owns this Mac.
Ask next
What did the AI agents do this week?
Which of our Macs have Cursor?
Dated recordShow the record
You watch the pointer move. Where it goes is harder to see.
Some AI tools now take over the Mac for a while. They open files, run commands and click through apps while you watch. That is the point of them. It also means someone should know which tools are on each Mac, and what they were set up to reach.
-
any week
Someone connects a new AI tool.
It gets a project folder or an account to work with. Weeks later, nobody remembers setting it up.
-
before a project
A client asks which tools touch their work.
They want a list they can trust, not a quick guess from memory.
-
when someone leaves
A teammate hands back their Mac.
The tools they installed and the connections they set up are still on it.
-
on an ordinary day
A file changes that you did not touch.
You want to see what was recorded, by which tool, and when.
Every AI tool, per Mac. And what it connects to.
Once Cybee is on a Mac, it keeps a dated list: the AI tools it finds and the connections they are set up with. You read it by asking your AI assistant. The actions it records stay on the Mac.
InstalledFree
Every AI tool, listed. Including the old ones.
Cybee lists the AI tools it finds on each Mac, such as Claude Code, the Claude app, Cursor and Codex, next to the Mac and the person who owns it.
Installed does not mean running, or still needed. Start with the tools you recognise, then ask about the rest.
AI tools on your Macs26.09.2026
-
Ana’s MacBook Pro4 tools
Claude CodeClaude appCursorCodex
-
Luca’s MacBook Pro2 tools
Claude CodeCursor
-
Mira’s MacBook Air1 tool
Claude app
-
Ana’s Mac mininone found
No AI tools on this Mac.
ConnectedFree
What each tool is connected to. And where that points.
An AI tool can be set up with connections to other things: a project folder, a documents site, an account. Cybee shows each one the way it was saved: which tool, the connection’s name, how it connects and the address it points to.
A connection shows what was set up. It does not prove the tool used it. Ask the owner what it is for, and whether it is still needed.
saved on Ana’s MacBook Pro
Claude Codeproject_files
Cursorproject_docs
Codexold_demo
Claude appnone set up
one connection, in plain words
AI toolCodex
connectionold_demo
howA small program on this Mac.
points to/example/tools/old_demo
what it showsIt was set up. Not that it was used.
next stepAsk Ana if it is still needed.
RecordedFree
What a tool did stays on the Mac. With the time and the result.
When Cybee observes an action by Claude Code or Cursor, it records the time, the tool, the action, what it was aimed at and the phase, such as attempted or completed. The record stays on the Mac, with secrets masked. The person who uses the Mac reads it with cybee ai-activity. Your company sees alerts, not the full record.
Read them together. Completed does not mean safe, and the record is not a complete history of everything a tool did. Protection keeps running underneath, and when a program behaves like malware, Cybee stops it on the Mac.
recorded on Ana’s MacBook Pro26.09.2026
- 09:41:02
Claude Code started to save a file.write_file · /example/workspace/notes.md · attempted
- 09:41:03
The save finished.write_file · /example/workspace/notes.md · completed
time · tool · action · target · phasenot a complete history
AlertedFree
Two agent actions raise an alert. Cybee alerts you. It does not stop the agent.
Cybee raises an alert when an AI agent tries to run a destructive command, and when one tries to disable or alter security tooling. The alert names the tool and the Mac. You mark it reviewed and give a reason.
Cybee chat card, example data. Asked: explain the alert on Luca’s Mac. Needs your review. AI agent tried to run a destructive command. Luca’s Mac · just now Severity: High What Cybee did: Recorded, not stopped Reviewed: Not yet Who did it: Claude Code, running a command Explain in plain words
What each record shows. And what it does not.
Use this when you review a finding or answer a client. It covers the Macs where Cybee is installed and supported. Check the requirements.
| The question | What Cybee shows | How to read it | Read next |
|---|---|---|---|
| Which AI tools are installed? | The AI tools it finds on each Mac, next to the Mac and its owner. | Installed does not mean running or still needed. The list does not cover every agent in the cloud. | Review an AI tool inventory |
| Which connections are set up? | The AI tool, the connection’s name, how it connects and where it points, as saved in its settings. | A saved connection does not prove use, or that data moved. It does not show that the access is safe. | Check where it points |
| Which tool action was recorded? | On the Mac, the person who uses it reads the time, the tool, the action and its phase, such as attempted or completed, for Claude Code and Cursor. Your company sees alerts, not this record. | Not a complete activity history. Completed does not mean safe. The Trust Passport has its own scope. | Read the Passport scope |
| Does Cybee limit what each agent can reach? | No. It shows the tools, their connections and alerts about what they did. Review access in the assistant and in the service itself. | Limits per agent are planned, not live. Finding, removing or rotating every API key is not included. | Check the roadmap |
Ask about your own Mac.
Once your AI assistant is connected, start with one Mac and one question. Read the assistant guide.
a first question to paste
Which AI tools and connections are on this Mac? Show the alerts about what they did.
Seeing your AI tools is free. You pay when you need to prove it.
The AI tool list and the protection underneath are free on every Mac. When you want a sealed record for a client, the Cybee subscription has a 14 day trial.
Free
Free
Forever. Unlimited Macs and people.
- Stops bad software while it runs
- Alerts in the chat, macOS, Slack, WhatsApp and SMS
- 118 safety checks on each Mac
- Apps, extensions and AI agents listed
- “Am I safe?” answers in your AI assistant
- Weak settings fixed once you say yes
- Email support within one working day
Cybee subscription
CHFEURUSDGBP9per Mac per month, or 90 a year
Everything in Free, plus:
- The sealed Trust Passport
- Security training for your team
Install, then start the 14 day trial
The 14 day trial starts in your AI assistant, after Cybee is installed. Ask for a Trust Passport, or for training. The link arrives in the chat and leads to Stripe, the payment service.
Per Mac, excluding tax. The same number in CHF, EUR, USD and GBP. Runs on Macs with an Apple chip, M1 or newer, on macOS 15 or newer. To check a Mac, open the Apple menu and choose About This Mac.All plan details
Watches programs, not people. What is in your files never leaves your Mac.
Stays on your Mac
- Your files, documents, email and messages
- Files in quarantine
- Passwords, keys and tokens
- The full activity log of Claude Code and Cursor
- Browsing history, screen, keystrokes and location
Leaves your Mac
- Which protections are on, and since when
- Alerts: what happened, the path or program, how serious it is and what Cybee did. Secrets are removed first
- App names and versions, extensions with their access, startup programs
- Which AI assistants are installed, the tool servers they use, and alerts about what they did
- The Mac’s name, its owner’s name, and the macOS and Cybee versions
- What gets stopped is decided on your Mac, not by an AI model on our servers.
- If Cybee disappeared, the app on your Macs would keep protecting them.
cybee AG, Zürich. Swiss and independent.
Before you look.
What does Cybee not do?
It does not limit what each AI agent can reach. Choosing that per agent is planned, not live. It does not find, remove or rotate every API key, and its activity records are not a complete history. It is not a certification or an audit.
Can Cybee find and rotate every API key?
No. It maps the connections your AI tools are set up with. Review keys with the service that issued them. Finding, removing and rotating every key is not included.
Can Cybee stop an agent from doing something?
Not by agent. Cybee shows what is installed, what it connects to and alerts about what the tools did, and it does not change what an agent may do. Limits per agent are planned. Protection still runs underneath, and when a program behaves like malware, Cybee stops it on the Mac. See the roadmap.
Can we send this to a client as proof?
Not as sealed proof. Use the list to answer a client’s question about your AI tools in your own words. The sealed record for a client is the Trust Passport. It covers the technical controls on your Macs, and it is not a complete export of AI activity or a certification of your company.
Does Cybee read my prompts or my files?
No. Cybee watches programs, not people. It records which AI tools are installed and what they are set up to connect to. On the Mac itself, it also records actions it observes, such as a file being saved. It does not read your files, your messages or what you type.
Where to go next.
Your next client will ask. Be ready.
curl -sSf https://get.cybee.dev | shPress Command and C to copy.
Run it in Terminal, a chat, your IDE or a CLI. Keep working where you started.
What the command does
- Installs a notarized agent on this Mac.
- Creates no account. The install is identified by a token.
- Starts protecting the device at once.
- Changes no setting until you confirm it in your AI assistant.
- Asks for this Mac’s administrator password once, and for no email address.