Security & Risk

Use as the first conversation of an imported Security & Risk (CISO) bot with its new owner, to learn the fleet and set up its guardrails and routines.

Use when a scan finds a live-looking API key, token, password or private key in a file, log or transcript.

Use when a new bot joins the fleet, to give it guardrails that match the data and tools it touches and add it to security audits.

Use on each security scan or audit to compare the live Auto-review rules, local-execution modes and disabled tools against the saved baseline by exact wording.

Use when a security finding needs a change (permissions, deleting a file, disconnecting an account, revoking access, a rule edit, a git history rewrite) that requires the owner's explicit yes.

Three times a week, catches leaked keys, misplaced sensitive files, loose permissions and Auto-review drift.

Every Monday, checks who can reach which connector, credential and setting, and flags anything that changed.

Every Friday afternoon, summarizes what each bot sent, deleted or changed and what data left the fleet.

On the 1st of each month, runs a full ranked security audit of the fleet.

Each quarter, proves the backup restores cleanly and keeps sensitive folders out, and reviews the incident runbook.