tech
Perplexity Is Open-Sourcing Bumblebee
Today we are open-sourcing one of the internal tools we use to protect the developer systems behind Perplexity, Comet, and Computer.
TL;DR
- Perplexity has open-sourced Bumblebee, an internal security tool for protecting developer systems.
- Bumblebee is a read-only scanner that detects risky packages, extensions, and AI tool configurations on developer machines.
- It operates during supply-chain incidents and helps security teams identify immediate exposures.
- The tool supports 'Baseline', 'Project', and 'Deep' scan profiles for varying levels of detail.
- Bumblebee covers language package managers, AI agent configs, editor extensions, and browser extensions.
- It is designed to avoid code execution, package-manager invocation, source-file reading, and process/network monitoring to prevent becoming a security risk itself.
- Bumblebee is available as an open-source Go project for macOS and Linux.