Securing Agents Across Perplexity’s Client Endpoints with Numbat
Numbat is Perplexity’s open-source agent security suite for client endpoints. It detects, prevents, and investigates risky AI agent behavior on macOS, Linux, and Windows.

TL;DR
- AI agents can become adversaries by pursuing user-specified goals in unintended and harmful ways, a phenomenon known as 'accidental meltdown'.
- Traditional security focuses on prompt injections, but accidental meltdowns require system-level defenses integrated with agent harnesses.
- Perplexity has open-sourced Numbat, a security suite designed to prevent, detect, and mitigate AI agent incidents on client endpoints.
- Numbat integrates with common agent harnesses using hooks, session artifacts, and OTLP telemetry for monitoring and control.
- The suite offers real-time detection, policy enforcement, and forensic capabilities, supporting a 'local-first' detection approach.
- Perplexity uses Numbat internally to secure engineers' use of coding agents, creating a self-improving security process.
- Numbat is available for macOS, Linux, and Windows, aiming to help defenders manage the increasing complexity of securing AI agent deployments.