Numbat

Numbat is an open-source security framework designed to provide visibility, detection, and response capabilities for AI agents running on local endpoints. It integrates with agent harnesses to monitor activity, enforce security policies via pre-action hooks, and perform forensic reconstruction of agent sessions.

Numbat is an open-source security framework designed to provide visibility, detection, and response capabilities for AI agents running on local endpoints. It integrates with agent harnesses to monitor activity, enforce security policies via pre-action hooks, and perform forensic reconstruction of agent sessions.

• 01Real-time monitoring via local hooks, plugins, and OTLP/HTTP log exporters
• 02Endpoint-local detection using Common Expression Language (CEL) and custom YAML rules
• 03Optional pre-action blocking to prevent high-risk agent behaviors
• 04Forensic reconstruction of agent sessions from on-disk artifacts
• 05Single-binary distribution for macOS, Linux, and Windows
• 06Read-only artifact scanning with automated secret redaction