Protection runs on the Mac.
cybee inspects program behaviour and content locally to detect threats. Hardening and response actions also run on the Mac.
Swiss. Independent. Privacy first.
Security software needs access. That access should be understandable.
See what happens on your Mac, which data reaches cybee and what your assistant provider may process.
Detection · hardening · remediation
Events · control states · inventory · alerts
Local inspection does not mean file contents are uploaded.
cybee inspects program behaviour and content locally to detect threats. Hardening and response actions also run on the Mac.
Security events, settings, software inventories and alerts are sent to cybee. File contents, passwords and access tokens are excluded from this data. Exact data fields and retention details still need confirmation.
Your assistant provider may process questions and summaries under its own settings and terms. Text pasted into a conversation cannot authorise device changes.
A tool activity view can contain action details such as commands and file paths. Review those details before sharing them. Ask us for the current event fields, redaction and retention information for your setup.
Explore AI agentsFor actions requested through cybee, the engine checks permissions before execution.
Sensitive actions need your approval for the named device and change. Ongoing protection follows the policy you have already authorised.
Read the assistant modelConnected Google Workspace adds account events, app grants and admin changes. It does not read email or document contents. Slack, Teams and SMS carry the alert information you share through those services. Their providers handle that information under their own terms. Explore Google Workspace
It does not certify the business.
A recipient can compare the record with cybee’s sealed copy to check for changes.
This checks the record, not the whole business. It is not an independent audit and cannot fill gaps in what was assessed.
Dates, scope and verificationData handling, permissions and what the record proves.
Encryption, protection status, application patch status, screen lock, extensions and installed AI tools. Only for the Macs actually assessed.
This device example excludes accounts, backups and training. Connected Google Workspace has its own accounts record. Policies, code, suppliers and people need separate evidence.
On a typical questionnaire the passport answers, with dates, the questions about your Macs: disk encryption on every listed Mac; endpoint protection that watches behaviour, and since when; the patch status of your applications; screen lock and password on wake; the browser extensions and AI tools installed. This device record does not cover accounts, MFA, backups, training completion or an incident plan. Connected Google Workspace adds an accounts record for that organisation. Personal accounts and unrelated services remain outside its scope. Policies, code, suppliers and people need their own evidence.
Protection for your devices. A record of the work.
curl -sSf https://get.cybee.dev | shCopying the command does not install anything.