1 link tagged with all of: ai-agents + endpoint-security + cli-tool
Click any tag below to further narrow down your results
Links
Numbat monitors AI agent actions on endpoints using local hooks, OTLP/HTTP logs and on-disk artifacts. It applies CEL-based detection and optional pre-action blocking, outputs versioned NDJSON records for events, findings and enforcement decisions, and offers forensic reconstruction and investigation tools.
- Numbat monitors AI agent actions on endpoints via local hooks and OTLP/HTTP logs, running CEL-based detection entirely on-device.
- Blocking is off by default—it only works with specific synchronous pre-action hooks and requires explicitly setting enforce: true plus installing numbat in enforce mode.
- It can forensically reconstruct agent activity from on-disk session artifacts even if numbat wasn't installed at the time, using read-only commands like agents, scan, and timeline.
- Ships as a single dependency-free binary (no cgo) for macOS, Linux, and Windows, with commands for hook management, rule testing, and building portable investigation case bundles.