Changelog
Features
- 000f2e3 feat(gateway): a beacon-gateway module that records LLM gateway traffic as Beacon events (#1244)
- b411437 feat(lenses): built-in Failures lens (#1224)
Bug Fixes
- e545c82 fix(codex): live tool results carry their output; MCP calls are MCP calls (#1241)
- 3ef1242 fix(dashboard): Print the dashboard launch URL only after the port binds. (#1253)
- dca11fe fix(discovery): recognize the agy executable
- 2684188 fix(discovery): recognize the agy executable (#1218)
- a577c89 fix(endpoint): keep scheduled jobs the host cannot run out of the install plan (#1233)
- e1d6690 fix(hooks): only claim a hook whose executable is the hooks binary (#1228)
- 4fa1ae2 fix(hooks): write Antigravity CLI hook schema (#1219)
- 1838530 fix(privacy): redact Postman, Docker Hub, Supabase and Netlify tokens (#1242)
- 4d5c9de fix(privacy): redact a URL password when the scheme follows a word ending in _ (#1252)
- 87ae4fd fix(privacy): redact and cap run, vcs and model/repository/branch strings (#1226)
- 437bb6f fix(privacy): redact repeated curl passwords, URL passwords after Bearer and labeled AWS secrets; replace long copies in linear time (#1230)
- e7f5bd6 fix(privacy): redact snake_case secret flags and stop query strings bleeding (#1194)
- 8d36d44 fix(rules): catch renamed rm copies under any name in approval-bypass-via-renamed-binary (#1227)
- cc14145 fix(rules): match an uppercase rm in recursive-root-delete (#1225)
- 2f69572 fix(trace): give tool.failed an error.type in the trace projection (#1229)
- f6707b9 fix(writer): let LastLine read a max-size runtime log line (#1238)
Other
- 9ca10c1 browser-extension e2e: wait out Chrome's managed-storage startup before each test
- 0c42887 browser-extension: apply policy locks at delivery time
- 9e26a42 browser-extension: fail closed on unreadable policy, resync options, gate the ID
- 6a0acc2 browser-extension: managed settings, update feed URL and a CRX signer
- 32495bf browser-extension: managed settings, update feed URL and a CRX signer (#1205)
- 97bbc7c browser-extension: pin the Chrome extension ID
- 25357b5 docs(changelog): split Unreleased into v1.3.51 through v1.3.58
- a747932 docs(changelog): split Unreleased into v1.3.51 through v1.3.58 (#1216)
- d8e0180 docs(changelog): the dashboard prints its launch URL only once the port is bound (#1253)
- fd90022 docs(changelog): v1.3.60, and v1.3.59 under its own heading
- bf851f2 feat(threat-rules): an event scanner, prepared events and a step matcher for correlation rules (#1243)
- 2f9ea89 hooks: ignore forged HOME and ungated BEACON_CLOUD_* (#913) (#1184)
- 9a664f9 perf(privacy): cut allocations and reflection out of SanitizeEvent (#1239)
- 38c8d9f perf(redaction): hold needle and needle-set ids in a two-word idSet (#1246)
- 029f930 perf(threat-rules): prefilter, indexed fields, action skips and exact untracked evaluation (#1231)
- 3457c71 release-extension: feed offers the newest signed release and swaps in safely
- 1de94d5 release-extension: keep a published CRX on re-runs; fail closed reading the feed
- a8050de release-extension: keep a release only when all four files are attached
- faefc54 release-extension: serialize the feed job across tags; parse the read-back
- 387e2cb release-extension: sign the Chrome build and publish its update feed
- b581190 release-extension: sign the Chrome build and publish its update feed (#1220)
Installation
Homebrew (macOS/Linux)
brew update
brew trust asymptote-labs/tap
brew tap asymptote-labs/tap
brew install beaconLinux (Debian, Ubuntu, Fedora, RHEL)
curl -fsSL https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.60/install.sh | BEACON_VERSION=1.3.60 bashManual Download
Download the appropriate archive for your platform from the assets below, extract it, and add the binary to your PATH.
Quick Start
beacon endpoint install
beacon endpoint status
beacon endpoint wazuh print-configThreat detection rules
beacon ships with a small built-in baseline. Install the full threat-rule
pack (attached as threat-rules.tar.gz below) and scan your local telemetry:
beacon rules pull https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.60/threat-rules.tar.gz
beacon rules list
beacon scan