--- title: "Artificial Immunity: security for Macs that run AI agents" description: "An immune system for the Mac where your AI agents work. An open-source detection core, free; a paid response layer." source: https://artificialimmunity.ai/ --- [Artificial Immunity](https://artificialimmunity.ai/#top) # Artificial Immunity. Know fast. Recover fast. An immune system for the Mac where your AI agents work. When something gets in, it tells you what could have leaked and which keys to change. Why now ## Your agents ship faster than you can read. With your keys. Antivirus looks for known malware; your agents run code nobody has read. Big companies have security teams for that. This is that layer, for one Mac. A poisoned package Your agent installed it. You pressed Enter. A leaked key It turns into a bill. The spending limit kicks in late. A take-home repo The interview test you cloned and ran was a stealer. The morning after Nobody can tell you what leaked or which keys to change. 444 npm packages poisoned by the ChainDrop worm in under four hours, 4 August 2026. [StepSecurity](https://www.stepsecurity.io/blog/chaindrop-npm-worm) What you see ## Quiet until it matters. Every alert is a cost. Only what is bad and certain reaches you. Homeostasis most days A menu bar icon and one line: is the Mac watched, is it quiet. Symptom rarely One finding as a card. Answer “expected” or “seen”. Fever when it's real A notification, a verdict, and a list of what could have leaked. You decide. Nothing irreversible happens without you. Borrowed from biology ## Three billion years of field-tested defense. Life never found an unbreakable shell. It evolved layers. Bacterium CRISPR-Cas ### Streptococcus thermophilus Stores a snippet of each virus it survives, then cuts that virus on sight. → Memory. A replayed attack is a test the detector must pass. Barrangou et al. · Science · 2007 Mammal cGAS–STING ### Mammalian cells Raises the alarm when DNA turns up in the cytosol, where it doesn't belong. → Context decides. An interpreter that detaches and keeps a connection open is a flag. Civril et al. · Nature · 2013 Human Regulatory T cells ### Homo sapiens Regulatory T cells stop the body from attacking itself. Nobel Prize, 2025. → No autoimmunity. Weak rule matches are counted, not shown. Nobel Assembly · 2025 Anatomy of an immune response ## A repo from a stranger, start to finish. You clone a project to take a look. ### 01 Infection It carries an editor task set to run the moment the folder opens. `.vscode/tasks.json · runOn: folderOpen` ### 02 Recognition Rules flag it within seconds. A theft can be faster than that. `FLAG · rules only · models involved: 0` ### 03 Fever A notification, then three model steps give a verdict. Secret values are cut out first. `verdict: three model steps · secrets: cut before sending` ### 04 Recovery A list: what could have leaked, where to revoke it. You do the fixing. `could have leaked: 3 keys · status: proposed` ### 05 Memory The whole attack, replayed, is a test every step must pass. `replay: finding at every step` Open core ## An open detection core. A paid response layer. The core that watches your Mac is open source and free. The layer that explains a case is paid. Host You Read the status, answer rare findings, decide. ↑ notification · verdict · list Adaptive · paid · soon Response Explains a case, tells you what to change. Closed source. Will include - Three-step verdict - What-could-leak list - macOS notification - Offline alarm ↑ flags and findings Innate · open and free Detection core Deterministic rules, running on your Mac. Watches - Claude Code - Cursor - Codex - MCP servers - VS Code tasks - git hooks - package scripts Every program start 198 published macOS rules, from SigmaHQ and Elastic, check every program start and new file. What runs by itself Places where code starts on its own. Poisoned dependencies Checks npm, pnpm and Cargo lockfiles against OSV and CISA KEV. Includes - Menu bar panel - Expected / seen answers - Hand-off to your agent - Replayed-attack test - Editor extensions Downloads public vulnerability lists, nothing else. [Source on GitHub](https://github.com/nuanu-ai/immune) - No model in the detection core. - The paid layer sends a redacted case summary to our server, which calls models. Secret values stay on your Mac. - “Docker or a VM is enough.” A sandbox limits the damage; it doesn't tell you what could have leaked. - “A tool with root is a hole itself.” That's why the core is open source and sends nothing off your Mac. Get started ## Get the first dose. Leave your email. We'll send you the setup steps. Email Where do your agents work? Code and repos Servers and deploys Docs and email Browser By sending this you agree to the [privacy policy](https://artificialimmunity.ai/privacy/). We use your email only to write about Artificial Immunity. [Artificial Immunity](https://artificialimmunity.ai/#top) An immune system for the Mac where your AI agents work. Built at Nuanu AI Lab. Sources and further reading - [StepSecurity, the ChainDrop npm worm, 2026](https://www.stepsecurity.io/blog/chaindrop-npm-worm) - [SigmaHQ detection rules](https://github.com/SigmaHQ/sigma) - [OSV vulnerability database](https://osv.dev/) - [CISA Known Exploited Vulnerabilities](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) - [Barrangou et al., Science 2007](https://pure.psu.edu/en/publications/crispr-provides-acquired-resistance-against-viruses-in-prokaryote/) - [Millman et al., Cell 2020](https://pubmed.ncbi.nlm.nih.gov/33157039/) - [Annual Review of Microbiology 2024](https://www.annualreviews.org/content/journals/10.1146/annurev-micro-041222-024843) - [Kärre et al., Nature 1986](https://www.nature.com/articles/319675a0) - [Civril et al., Nature 2013](https://www.nature.com/articles/nature12305) - [Nobel Prize in Physiology or Medicine 2025](https://www.nobelprize.org/prizes/medicine/2025/press-release/) - [Forrest et al., Self-nonself discrimination in a computer, 1994](https://profsforrest.github.io/homepage/data/publications/1994-self-nonself.pdf) © 2026 Artificial Immunity [Privacy](https://artificialimmunity.ai/privacy/) · [hello@artificialimmunity.ai](mailto:hello@artificialimmunity.ai)