@penzlik
a security company shipped a security tool this week with all 52 rules turned off by default
and honestly it is the correct decision
Numbat hooks into coding agents and can block an action before it runs. Perplexity shipped every rule in monitor-only mode, because a false positive here is not a quiet alert in a dashboard, it is a denied tool call in the middle of your work.
enforce by default and every engineer disables it inside a week
the README also states plainly that it cannot recover what the agent never wrote down, and that a rule match is a requested action rather than a completed one
flight recorder, not firewall. protection from accidents, not attackers.
running the read-only mode today. keeping the blocking mode away from anything I need working.
1 reply
0 recast
4 reactions