Security alerts for small teams on Macs
One clear alert. Then you decide.
Protection is free on every Mac. Proof is CHFEURUSDGBP 9 per Mac a month.
When Cybee stops a harmful program, you get one plain message in the chat, macOS, Slack, WhatsApp or SMS. So when an insurer asks how you would know, you have the answer.
Start free. One command, no account.
Step by step, for your Mac. By AirDrop, message or email.
curl -sSf https://get.cybee.dev | shFrom get.cybee.dev, Cybee’s install server. Read the script
Run it in Terminal, a chat, your IDE or a CLI. Keep working where you started.Press Command and C to copy.
What the command does
- Installs a notarized agent on this Mac.
- Creates no account. The install is identified by a token.
- Starts protecting the device at once.
- Changes no setting until you confirm it in your AI assistant.
- Asks for this Mac’s administrator password once, and for no email address.
Example data. Studio Nord is a made up company.
Someone will ask how you would know. Usually before they sign.
Insurers, clients and auditors rarely ask whether something ever went wrong. They ask how you would find out, and who would act on it.
-
at renewal
Your insurer asks what watches your Macs.
“How do you detect harmful software?”
A yes is not enough. They want to hear what watches, and who hears about it.
-
before a deal
A client asks how you handle a security incident.
They want the first steps, and the name of the person who takes them.
-
on a Saturday
A program acts up while nobody is at the desk.
The Mac is on. The team is not. Someone should still hear about it.
-
on a review
An auditor asks who looked at an alert, and when.
A dated record answers it. Memory rarely does.
Why the question keeps coming
59%
of small and medium companies were attacked in the past 12 months. Being ready starts with knowing when it happens to you.
Source: Hiscox Cyber Readiness Report 2025
26,000+
new Mac malware samples were added to Jamf’s database in 2025. A Mac needs looking after too.
Source: Jamf Security 360, 2026
It stops the program. Then it tells you.
Protection runs on each Mac all day, whether anyone is at the desk or not. When Cybee stops something, the alert is its report to you.
ReadFree
Start with the event. Then ask the person.
Each alert names the Mac, the time, what the program did and what Cybee already did about it. In this example, Cybee stopped a threat on Ana’s MacBook Pro.
The alert cannot tell you why it happened. Ask the person using that Mac what they were doing at that moment.
Cybee14:07
A program was stopped on Ana’s MacBook Pro.
- Mac
- Ana’s MacBook Pro
- When
- Sat 26 Sep, 14:07
- What happened
- Cybee stopped a threat.
- State
- Stopped and quarantined.
- Alert id
- tnqxbe
Ask your AI assistant about alert tnqxbe
AskFree
Ask about the id. In the chat you already use.
Ask in the AI assistant where you set up Cybee, such as Claude, ChatGPT or Cursor: “Explain the latest alert in plain words.” Terminal works too. The answer comes from what was recorded on the Mac: which program, what it did, what Cybee did about it, and what is still open.
Your AI assistant explains the record. It does not decide what is harmful. If its answer and the record differ, the record counts.
Explain the latest alert in plain words. Which program was involved, what was recorded, and what do we still need to check?
Used Cybee
Stopped and quarantined.
- Cybee stopped a threat14:07Stopped
- The program file14:07Quarantined
Nobody has reviewed this alert yet.
Ask Ana if she started a new program.
AlertShow the record
DecideFree
A person decides what happens next. Not the alert, and not the chat.
Cybee has already stopped the program. What comes after is a call for someone on your team, based on what you know.
An alert never approves a change on its own. Nothing from a chat changes a Mac until the person who uses it says yes.
Alert26.09.2026
- 14:07
Cybee stops the program and quarantines it.On Ana’s MacBook Pro.
- 14:07
The alert reaches the team in Slack.Luca sees it first.
- 14:15
Luca asks Ana if she started it.Only a person can say if it was expected.
- 14:20
Ana does not recognise it. The file stays in quarantine.Luca marks the alert reviewed.
Choose the next step from what you know
-
it was expected
If it matches the work.
Write down what the person was doing. Then ask Cybee what else the program did. Knowing the program does not make everything it did safe. If you need the program back, someone with that Mac’s password can restore it from quarantine.
-
nobody recognises it
If the program is unfamiliar.
Keep the Mac, the time and the description together. Ask support with that context instead of guessing. Then check what actually happened.
-
still unclear
If the result is still unclear.
Leave it open. An assistant’s explanation does not replace the recorded result.
ReachFree
The chat, macOS, Slack, WhatsApp or SMS. Wherever your team works.
Send alerts where the people who can follow up will see them. Each alert has the same id wherever it arrives, and each channel has its own severity floor. For serious detections the Mac also shows a notification, if you allow it.
Name one person who reads every alert, asks the colleague what they were doing and writes down what was decided.
Cybeenow
A program was stopped.
On Ana’s MacBook Pro. It was quarantined.
Get the next alert in plain words. One command per Mac.
Protection and alerts are free on every Mac. Run the line on each Mac your team works on, and the next alert names the Mac, the time and what Cybee did.
Step by step, for your Mac. By AirDrop, message or email.
curl -sSf https://get.cybee.dev | shFrom get.cybee.dev, Cybee’s install server. Read the script
Run it in Terminal, a chat, your IDE or a CLI. Keep working where you started.Press Command and C to copy.
What the command does
- Installs a notarized agent on this Mac.
- Creates no account. The install is identified by a token.
- Starts protecting the device at once.
- Changes no setting until you confirm it in your AI assistant.
- Asks for this Mac’s administrator password once, and for no email address.
Nobody buys security. Somebody else sets a date.
An agency of about ten people, all on Macs. Their insurer sent a security questionnaire.
- Found Cybee.
- Installed.
- First record sealed.
- Sent to the insurer.
No demo. No call. The insurance policy was issued.
The first record shows what was true that night. Every day after adds history.
A real customer story, shared anonymously.
Alerts are free on every Mac. You pay when you need to prove it.
Protection and alerts cost nothing, for as many Macs and people as you have. The Cybee subscription adds the sealed Trust Passport and security training.
Free
Free
Forever. Unlimited Macs and people.
- Stops bad software while it runs
- Alerts in the chat, macOS, Slack, WhatsApp and SMS
- 118 safety checks on each Mac
- Apps, extensions and AI agents listed
- “Am I safe?” answers in your AI assistant
- Weak settings fixed once you say yes
- Email support within one working day
Cybee subscription
CHFEURUSDGBP9per Mac per month, or 90 a year
Everything in Free, plus:
- The sealed Trust Passport
- Security training for your team
The 14 day trial starts in your AI assistant, after Cybee is installed. Ask for a Trust Passport, or for training. The link arrives in the chat and leads to Stripe, the payment service.
Per Mac, excluding tax. The same number in CHF, EUR, USD and GBP. Runs on Macs with an Apple chip, M1 or newer, on macOS 15 or newer. To check a Mac, open the Apple menu and choose About This Mac.All plan details
Watches programs, not people. What is in your files never leaves your Mac.
Stays on your Mac
- Your files, documents, email and messages
- Files in quarantine
- Passwords, keys and tokens
- The full activity log of Claude Code and Cursor
- Browsing history, screen, keystrokes and location
Leaves your Mac
- Which protections are on, and since when
- Alerts: what happened, the path or program, how serious it is and what Cybee did. Secrets are removed first
- App names and versions, extensions with their access, startup programs
- Which AI assistants are installed, the tool servers they use, and alerts about what they did
- The Mac’s name, its owner’s name, and the macOS and Cybee versions
- What gets stopped is decided on your Mac, not by an AI model on our servers.
- If Cybee disappeared, the app on your Macs would keep protecting them.
cybee AG, Zürich. Swiss and independent.
A few practical questions.
What does Cybee not do?
It is not a security team. There is no operations centre behind Cybee that watches your alerts or steps in for you: the alert comes to you, and someone on your team decides. It is not a certification or an audit. It runs on Macs with an Apple chip, M1 or newer, on macOS 15 or newer.
Is it really free?
Yes, the protection is. Stopping bad software and alerts in the chat, macOS, Slack, WhatsApp or SMS cost nothing on every Mac, with no limit on Macs or people, and so does email support within one working day. You pay only for proof: the Cybee subscription is CHFEURUSDGBP 9 per Mac a month, or 90 a year, excluding tax. It adds the sealed Trust Passport and security training. To try it for 14 days, ask your AI assistant for a Trust Passport and use the Stripe link it sends.
Does every alert mean an attack?
No. An alert records behaviour that needs context. Review what was observed, keep what you do not know clear, and check the result of any response.
What leaves my Mac when an alert fires?
The security event: which program, what it did, when, and on which Mac. Never the contents of your files, and never passwords or tokens. Cybee watches programs, not people.
What does it change on my Mac?
The install adds the Cybee app, one icon in the menu bar and the protection that runs in the background. macOS asks you to switch on Full Disk Access for it, and Cybee connects to the AI assistants it finds on that Mac. Settings stay as they are until the person who uses the Mac says yes to a change. To remove it, type sudo cybee uninstall in Terminal.
What does my insurer or client see?
Only what you send. With the Cybee subscription you can send a Trust Passport: a dated record of how your Macs are protected, since when, and the days Cybee could not see. It is sealed: it carries a fingerprint, so the reader can see that nothing was changed afterwards. It does not check the facts a second time. Your insurer or client decides what evidence is enough.
Does this replace SOC 2 or ISO 27001?
No. SOC 2 and ISO 27001 are audits of how a whole company works, done by an outside auditor. Cybee covers your Macs: it stops bad software, sends the alert and keeps a dated record. That record can answer the questions about your Macs in an insurer’s or a client’s form. If someone asks for SOC 2 or ISO 27001, the Trust Passport does not replace it.
Where to go next.
Set it up before the next alert. One command.
curl -sSf https://get.cybee.dev | shPress Command and C to copy.
Run it in Terminal, a chat, your IDE or a CLI. Keep working where you started.
What the command does
- Installs a notarized agent on this Mac.
- Creates no account. The install is identified by a token.
- Starts protecting the device at once.
- Changes no setting until you confirm it in your AI assistant.
- Asks for this Mac’s administrator password once, and for no email address.