Beacon

v0.0.74 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 1mo Forensics & Incident Response

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-ai-cli agent-security ci-cd claude-code cloud codex

+7 more

cursor detection-engineering endpoint-security mobile-device-management security security-information-and-event-management security-tools

Affected surfaces

auth rbac

Summary

AI summary

Added optional off-by-default policy provider seam and read-only CI workflow permissions.

Full changelog

Changelog

Other

dd93ec7627bbdbebe95e6d9a986ae7c84441c565 Add agent-permission-bypass-spawn detect rule
b1be0d08a4ff32e8d393191c32d546ed59c2684b Add agent-permission-bypass-spawn detect rule (#226)
9b9d0d9b650b27d32ebdf74320b007319665e9ec Add optional, off-by-default policy provider seam to the hook path
3caa79db27f164027b3628276ce4218a69f1f869 Add optional, off-by-default policy provider seam to the hook path (#227)
a1b21a5b8389aed8cacaee27910cf3ea9321e94a Add read-only permissions to CI workflow (#228)
c971a94acd25f0fef9f6f38d6c91c955d2b6bf02 Document v0.0.73 CLI release
5f5d5cdd2f11e029dbff179b7a997cd821e27b6e Document v0.0.73 CLI release (#203)
58da25c26c0f102b1893631850e4b9bcdd65bc56 Extract shared rule loading into pkg/asymptoteobserve/rulestore
4e18c8e3b20f076bd1e49ff4b40f433d20c18b75 Extract shared rule loading into pkg/asymptoteobserve/rulestore (#225)
59e7e90a1d9e9da0167a0a0ae065275873301d74 Honor Claude policy deny on permission-request, not just pre-tool

Installation

Homebrew (macOS/Linux)

brew tap asymptote-labs/tap
brew install beacon

Manual Download

Download the appropriate archive for your platform from the assets below, extract it, and add the binary to your PATH.

Quick Start

beacon endpoint install
beacon endpoint status
beacon endpoint wazuh print-config

Threat detection rules

beacon ships with a small built-in baseline. Install the full threat-rule
pack (attached as threat-rules.tar.gz below) and scan your local telemetry:

beacon rules pull https://github.com/asymptote-labs/agent-beacon/releases/download/v0.0.74/threat-rules.tar.gz
beacon rules list
beacon scan

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Beacon

Get notified when new releases ship.

About Beacon

All releases →

Related context

Related tools

Earlier breaking changes

v0.0.54 Require cloud run ID before upload