Perplexity Open-Sources Bumblebee Security Scanner for Developer Machines.

Perplexity has released Bumblebee, an open-source security scanner designed to detect risky software on developer machines. The read-only tool checks for vulnerable packages, browser extensions, system plugins, and AI tool configurations on macOS and Linux.

The company announced the release on LinkedIn, noting that Bumblebee started as an internal security tool before being made publicly available. When connected to Computer, Perplexity's AI agent platform, the scanner can trigger deeper investigations whenever new supply-chain risks emerge in the ecosystem.

Bumblebee operates as a read-only scanner, meaning it examines system configurations without making changes. The tool focuses on several attack vectors that have become increasingly common in software development environments:

• Third-party software packages and dependencies
• Browser and system extensions with elevated permissions
• AI development tool configurations that may expose credentials or data
• Supply-chain risks introduced through compromised libraries

The scanner's read-only approach addresses a key concern for security teams: visibility without disruption. Developers can run Bumblebee scans without worrying about system modifications or workflow interruptions.

Perplexity's decision to scan AI tool configurations reflects the reality that development teams now regularly use services like ChatGPT, Claude, and Cursor in their workflows. Misconfigured integrations or exposed API keys in these tools can create security vulnerabilities that traditional scanners miss.

The scanner's integration with Computer, Perplexity's agent platform, enables automated responses to emerging threats. When a new supply-chain vulnerability is disclosed, organizations can trigger Bumblebee scans across their developer fleet to identify affected systems.

Perplexity has been expanding Computer's security capabilities in recent months. The company previously added sandboxing and content scanning to prevent agents from accessing sensitive data or executing untrusted code.

The scanner's design reflects lessons learned from supply-chain attacks that have compromised developer tools. By checking machines where software is built, Bumblebee helps organizations detect compromised environments before malicious code reaches production systems. Perplexity notes that securing its own products begins with protecting the developer machines used to build them.

Making Bumblebee open source allows security teams to audit the scanner's code, customize checks for their specific environments, and contribute improvements back to the project. The tool is available on GitHub, though Perplexity has not yet disclosed the license terms or governance model.

For organizations using Computer or other AI agent platforms, Bumblebee provides a way to maintain visibility into developer machine security as AI tools become more deeply integrated into software development workflows. The scanner's focus on read-only operations and supply-chain risks addresses gaps that traditional endpoint security tools may miss.