Security and privacy
What Cybee sees. What never leaves your Mac.
Cybee protects the Macs your team works on, so it has to see what runs on them. This page shows what it looks at, what it sends us, and who says yes before a Mac changes.
Step by step, for your Mac. By AirDrop, message or email.
curl -sSf https://get.cybee.dev | shFrom get.cybee.dev, Cybee’s install server. Read the script
Run it in Terminal, a chat, your IDE or a CLI. Keep working where you started.Press Command and C to copy.
What the command does
- Installs a notarized agent on this Mac.
- Creates no account. The install is identified by a token.
- Starts protecting the device at once.
- Changes no setting until you confirm it in your AI assistant.
- Asks for this Mac’s administrator password once, and for no email address.
where the information goesper Mac
Your Macdoes the work
runs here
- Watching what programs do
- Stopping bad software
- The 118 checks, and fixes you approve
stays here
- The contents of your files
- Saved passwords and app tokens
sends security facts, never file contents
Cybeea Swiss company
receives
- Security events
- Which settings are on
- Which apps, extensions and AI agents are installed
- Alerts about AI tool actions
keeps
- A dated record of each Mac
- The sealed Trust Passports you send
only the services you connect
What you connecttheir own terms apply
what each one handles
- Your AI assistant
- Processes your questions and the summaries you ask for.
- Slack, WhatsApp, SMS
- Carry the alerts you choose to send there.
You let it into every Mac. Someone will ask what it does.
Security software has to see what runs on a computer to protect it. So before you install it, and again when a client asks, you need to know where that access ends.
-
before you install
You want to know what you are letting in.
“What exactly does this get access to?”
This page shows what Cybee looks at and what it sends. The install guide shows each thing macOS asks you to allow.
-
on day one
Your team asks if they are being watched.
“Can my employer see my files?”
No. Cybee watches programs, not people, and files stay on the Mac.
-
in a questionnaire
A client asks which tools can reach their data.
They want it in writing: what leaves your Macs, and where it goes.
-
at a review
An auditor asks who approved a change.
The dated record keeps the time the person at the Mac said yes.
It works on the Mac. Changes wait for you.
Protection and the checks run on each Mac. Cybee keeps a dated record of what it saw, and anything that would change a Mac waits for the person who uses it.
Built on Apple
It runs on Apple’s own security framework. And Apple checked it for malicious content.
Apple checked Cybee’s Mac software for malicious content before release. That check is called notarization. It is not a certification of how well a product detects threats.
To see what programs do as they run, Cybee uses the part of macOS that Apple built for security software, the Endpoint Security framework.
the Cybee installerbefore you install
- Checked by Apple before releaseNotarizationYes
- Watches programs through Apple’s frameworkEndpoint SecurityYes
- Install script you can read firstget.cybee.devOpen
- Account or password to createkey on the MacNone
What it sees
It sends a list of facts about your Mac. Never what is inside your files.
To catch bad software, Cybee checks program behaviour and files on the Mac itself. What reaches Cybee is a list of facts: security events, which settings are on, which apps, extensions and AI agents are installed, and alerts about what the AI tools did. Cybee is a Swiss company under Swiss data protection law.
-
on every Mac
Protection and device settings
Program behaviour is checked on the Mac, and files are checked against known malware. Protection, safer settings and responses run on the Mac. Security events, settings, app lists and alerts are sent to Cybee.
Never sent: what is inside your files, or the passwords and tokens saved on the Mac.
-
AI tools
AI tools and recorded actions
Which AI tools are installed, what they are connected to, and alerts about what the tools did are sent to Cybee. The full record of what the tools did stays on the Mac, with passwords and other secrets masked. The person who uses the Mac can read it with
cybee ai-activity.A separate view from the everyday security facts.
-
services you choose
Your AI assistant and alert messages
Your chosen assistant processes your questions and summaries under its own settings and terms. Slack, WhatsApp or SMS providers handle the alerts you share through them, under their terms.
You choose which of these services to connect.
Where the data lives
| Stays on the Mac | Leaves the Mac | Where it is held |
|---|---|---|
| File contents, emails, messages, browsing, the screen, typing, chats with an assistant, the “This Mac” numbers and the full AI activity log. | Which protections are on and since when. Alerts with secrets removed. App names and versions, browser extensions and startup programs. AI assistants and their tool servers. The Mac’s name, the owner’s name if set, and the macOS and Cybee versions. | Cloudflare, a US company, with the database in the EU region. The alert archive on Cybee’s own server in Germany. Phone alerts through sent.dm. |
Removing it
Either line removes Cybee from a Mac. See what the uninstall removes, in order.
sudo cybee uninstallcurl -sSf https://delete.cybee.dev | sudo shCybee is a Swiss company, independent, privacy first.
Who decides
A request in the chat. A decision on the Mac.
When someone asks their AI assistant to change a setting, the person who uses that Mac sees the request on it, in plain words, and says yes or no. Nothing changes before that. If they say no, the setting stays as it is.
Stopping bad software happens straight away, without asking anyone. Changing a setting always waits for a yes on that Mac. An alert never approves a change on its own.
Mira’s MacBook Air26.09.2026
- 09:41
Understand. Cybee asks Mira to turn on screen lock.On her Mac: what will change, and on which Mac. Nothing changes yet.
- 09:42
Confirm. Mira says yes to this one change.She approves the specific action Cybee proposed.
- 09:42
Check. Screen lock is on.118 of 118 checks hold.
The recordCybee subscription
A record your client can check. The check shows if it was changed.
When you send a Trust Passport, the person who receives it can open one link and compare it with the copy Cybee sealed. If anything in it changed after sealing, the check shows it.
The check answers one question: has this record changed? It is not an audit, a company certification or proof about anything that was not assessed.
Trust Passport26.09.2026 09:45
the link you sentshared
09:45
4 of 4 Macs. 118 of 118 checks hold.
- Fingerprintsha256 9f3c…b71e
compared
kept by Cybeesealed
09:45
4 of 4 Macs. 118 of 118 checks hold.
- Fingerprintsha256 9f3c…b71e
Has this record changed? No. Both fingerprints match.
Free for every Mac. You pay when you need to prove it.
The protection is free because we want every Mac in a small company protected. We earn money when a company has to prove it.
Free
Free
Forever. Unlimited Macs and people.
- Stops bad software while it runs
- Alerts in the chat, macOS, Slack, WhatsApp and SMS
- 118 safety checks on each Mac
- Apps, extensions and AI agents listed
- “Am I safe?” answers in your AI assistant
- Weak settings fixed once you say yes
- Email support within one working day
Cybee subscription
CHFEURUSDGBP9per Mac per month, or 90 a year
Everything in Free, plus:
- The sealed Trust Passport
- Security training for your team
The 14 day trial starts in your AI assistant, after Cybee is installed. Ask for a Trust Passport, or for training. The link arrives in the chat and leads to Stripe, the payment service.
Per Mac, excluding tax. The same number in CHF, EUR, USD and GBP. Runs on Macs with an Apple chip, M1 or newer, on macOS 15 or newer. To check a Mac, open the Apple menu and choose About This Mac.All plan details
Before you connect.
What does Cybee not do?
It does not send what is inside your files, or the passwords and tokens saved on the Mac, anywhere. It is not a certification or an audit, and it does not answer for your policies, your people or your cloud. It runs on Macs with an Apple chip, M1 or newer, on macOS 15 or newer. Choosing what each AI agent may reach is planned, not live.
Is this employee monitoring?
Cybee is security software. It is not built to track productivity or judge employee performance. Some of what it records can be tied to a person, so here is the full list: which settings are on, which apps and browser extensions are installed, what a program did when it behaved like malware, and alerts about what AI tools did on that Mac. It does not read your messages or your browsing. Tell your team what it records before you install it.
Does Cybee control every AI agent?
No. Installed tools, configured connections and alerts about what the tools did give you visibility. Limits on the credentials each agent can use remain planned.
How does Cybee handle what it keeps?
Every fact it keeps carries the date it was seen. The device IDs and access keys that Cybee itself issues are stored hashed, a one way scramble, so they are not kept as readable values. If you paste a client’s questionnaire into the chat, Cybee reads it as text. It does not follow instructions written inside it. How long data is kept and when it is deleted is not final yet, so ask us for the current details.
Where can I request processing information?
Write to [email protected]. Ask for the current data processing agreement and the details relevant to your setup. The privacy policy explains how personal information is handled.
Where to go next.
Your next client will ask. Be ready.
curl -sSf https://get.cybee.dev | shPress Command and C to copy.
Run it in Terminal, a chat, your IDE or a CLI. Keep working where you started.
What the command does
- Installs a notarized agent on this Mac.
- Creates no account. The install is identified by a token.
- Starts protecting the device at once.
- Changes no setting until you confirm it in your AI assistant.
- Asks for this Mac’s administrator password once, and for no email address.