numbat: Endpoint Visibility and Security for AI Agents

Repositoryperplexityai/numbatTool

numbat is an open-source tool by Perplexity AI providing on-device detection, forensic reconstruction, and optional pre-action blocking for AI agent activity.

Key points

  1. Endpoint monitoring: Observes desktop, CLI, IDE, and gateway agents using local hooks, plugins, OTLP/HTTP logs, and on-disk session artifacts.
  2. Rule-based detection: Evaluates live and at-rest activities using a local Common Expression Language (CEL) engine and custom YAML rules.
  3. Opt-in blocking: Supports synchronous pre-action blocking, though enforcement is disabled by default in favour of monitor-only rules.
  4. Forensic reconstruction: Reconstructs agent sessions from disk artifacts without requiring prior numbat instrumentation, redacting secrets automatically.
  5. Lightweight architecture: Ships as a single static Go binary (without cgo) across Linux, macOS, and Windows.

Why it matters

As autonomous AI agents gain direct access to local filesystems, terminals, and internal APIs, endpoint security requires new tooling. numbat provides visibility into agent actions on developer workstations while preserving privacy through local evaluation.

Analysis

numbat addresses the security gap created by coding assistants and desktop agents executing commands locally. By leveraging Go, OTLP/HTTP standards, and Google's CEL for policy checks, it avoids external dependencies and heavy runtimes. Structured output is written as versioned NDJSON with explicit JSON schemas. It targets security teams, incident response specialists, and organisations managing developer endpoints. Based on the v0.3.0 schema reference and sub-1,000 star count, it is an early-stage but thoughtfully engineered project addressing agent security.

Found in

Summary generated by AI (Gemini 3.8 Flash, 27 September 2026). It may contain errors – the original source is authoritative.

Similar in content, found by the AI search.

  • Repository:CopilotKit/OpenBot

    OpenBot: Open-Source Platform for Isolated and Governed AI Coworkers

    OpenBot by CopilotKit is a self-hosted platform providing AI agents as coworkers. Each agent operates within its own dedicated computer environment, featuring a real browser, scoped file access, and explicit tool permissions.

    4.3kstarsTypeScript

    AI & LLMs· Tool

  • Repository:NVIDIA/OpenShell

    NVIDIA OpenShell: Isolated Runtime for Autonomous AI Agents

    NVIDIA OpenShell is an open-source runtime written in Rust designed to run autonomous AI agents in secure sandboxes. It enforces declarative policies at the kernel level and guards access to network routes and credentials.

    16.6kstarsRust

    AI & LLMs· Tool

  • Repository:NVIDIA/SkillSpector

    SkillSpector: Security Scanner for AI Agent Skills by NVIDIA

    SkillSpector is an open-source security scanner from NVIDIA designed to inspect extensions and skills for AI agents (such as Claude Code, Codex CLI, and MCP) for vulnerabilities and malicious patterns before installation.

    15.9kstarsPython

    AI & LLMs· Tool

  • Repository:affaan-m/agentshield

    AgentShield: Security Auditor for Claude Code and MCP Configurations

    AgentShield is an open-source TypeScript security scanner designed for AI agent setups. It inspects `.claude/` directories to detect hardcoded secrets, unverified MCP servers, hook injection vulnerabilities, and tool permission misconfigurations.

    1.2kstarsTypeScript

    AI & LLMs· Tool

Let's talk about your project

Locations

  • Mattersburg
    Johann Nepomuk Bergerstraße 7/2/14
    7210 Mattersburg, Austria
  • Vienna
    Ungargasse 64-66/3/404
    1030 Wien, Austria

Parts of this content were created with the assistance of AI.