Browse rules by MITRE ATT&CK

Windows is a major family of operating systems developed by Microsoft. These rules govern system security, administrative safety, and configuration best practices for AI agents.

Comprehensive macOS security & safety governance for AI coding agents — 44 rules spanning all 11 SSG tool-use categories: destructive operations, privilege escalation, untrusted code execution, credential & secret access, network egress, supply chain, process & system control, version-control integrity, source & config integrity, sensitive data handling, and agent hygiene. Blocks SIP/Gatekeeper bypass, keychain & credential theft, reverse shells & data exfiltration, untrusted .pkg / Homebrew installs, LaunchDaemon/Agent persistence, entitlement weakening, PII collection (Messages/Photos/Contacts), and irreversible disk / Time Machine destruction. Each rule is mapped to MITRE ATT&CK.

Gmail and Microsoft Outlook governance for AI assistants. These rules keep an agent from sending, deleting, or auto-forwarding email on your behalf without a human in the loop — the controls a non-technical user wants when Claude Cowork or the Codex desktop app is connected to their mailbox over MCP.

Google Docs, Microsoft Word, and Google Drive governance for AI assistants. These rules block public ('anyone with the link') sharing and require approval before an agent deletes a document or changes who can access it — the controls a non-technical user wants when an AI app is connected to their documents over MCP.

Google Sheets and Microsoft Excel governance for AI assistants. These rules block spreadsheet formulas that exfiltrate data to external URLs (IMPORTXML / IMPORTDATA / IMPORTRANGE / WEBSERVICE) and require approval before an agent deletes a sheet or clears cells — the controls a non-technical user wants when an AI app is connected to their spreadsheets over MCP.

Jira and Atlassian governance for AI assistants. These rules require human approval before an agent deletes issues or makes bulk changes across many tickets, and keep an audit trail of every create/update/comment/transition — the controls a team wants when Claude Cowork or the Codex desktop app drives Jira over MCP.