asymptote-labs/agent-beacon

Beacon is an open source monitoring tool that watches what AI coding assistants are doing on a developer's computer and produces a structured log of that activity for security teams to review. As AI agents like coding assistants start taking real actions such as running commands, reading and editing files, and making network requests, organizations face a new visibility gap: they can see what applications are installed but have no unified record of what the AI actually did during a session. Beacon runs quietly in the background on the endpoint, the developer's laptop or workstation, and intercepts telemetry from supported AI runtimes. It captures things like which prompts were sent, which tools the agent invoked, which commands it ran, which files it touched, and what approvals were granted or denied. All of this is written to a local log file in a structured format compatible with Wazuh, a popular open source security information platform. Teams that use Splunk, another security monitoring system, can forward the same events there as an optional step. The tool is deliberately local first: it does not send data to any external server during normal operation, which matters for organizations that handle sensitive code. A local only dashboard lets individuals inspect their own agent activity in a browser without sending anything off the machine. Security and IT teams can deploy Beacon across a fleet of developer Macs using MDM tools like Jamf Pro or Fleet. It is written in Go and currently supports macOS.