SUNBEAM SCANNER

Five surfaces.
Complete AI workforce inventory.
Under 10 minutes.

Network. Workstation. Egress. Cloud. SaaS.
Sunbeam scans every surface simultaneously, detects what each agent is actively doing, and tells you what changed since your last scan.

155 fingerprints · 7 SaaS platforms · 649 tests passing

LIVE SCAN
scanning: initialising...
10machines
0findings
SCANNINGstatus
HIGH
MEDIUM
GOVERNED
SCANNING

DETECTION GENERATIONS

Built in generations. Each one sees what the last missed.

Gen 1Live

Network Detection

Active TCP/HTTP probe across your local network and 32 cloud scanners. 154 AI fingerprints matched against every open port.

Gen 2Live

Footprint & Egress

Filesystem artefacts, browser history, shell history, environment variables, application logs, VS Code extensions, outbound egress analysis, and authenticated SaaS platform scanning.

Gen 3Roadmap

Upstream Inspection

DNS and carrier-layer AI traffic inspection. Cloudflare Gateway and Pi-hole integration. Detect AI traffic without any agent on the machine.

DETECTION

Five surfaces. One complete picture.

Network155 fingerprintsAI services running on your network
Egress3 API rangesAgents calling home to AI APIs
Workstation7 methodsAI tools on every machine
Cloud32 scannersAI services in AWS, Azure, GCP
SaaS7 platformsAI agents inside enterprise apps

← Scroll to see all surfaces →

What a finding looks like.

HIGHOllama127.0.0.1:11434network
HIGHAnthropic API160.79.104.xegress
HIGHOPENAI_API_KEYenvironment variableworkstation
HIGHAWS Bedrockus-east-1cloud
HIGHM365 Copilot (47)47 active licencessaas

WHAT SUNBEAM FINDS NOW

More than presence.

Real footprint

You already knew the agent was there. Now you know how much memory it holds, how long it’s been running, whether it’s operating as root, and whether it can reach your SSH keys. Presence is just the beginning.

AI spend, visible

Every agent in your fleet runs on a model with a price attached. Sunbeam surfaces which model each agent is using and estimates what it’s costing you — so the conversation with finance starts with a number, not a guess.

The moment it appears

The moment a new agent appears on any machine, you know. High-risk agents — running as root or with key access — trigger an alert immediately. You find out now, not in the next quarterly review.

The agents no scanner finds

Some AI tool connectors never touch the network. They run silently inside developer tools, connecting AI models directly to your filesystems, databases, and APIs. Sunbeam reads the configuration files other scanners never look at — including any storing credentials in plaintext.

155 fingerprints, no credentials

No credentials required. No agent installed on the target machine. If an AI service is running anywhere on your network — including the new wave of enterprise AI integration platforms — Sunbeam finds it from the outside.

WHAT YOU GET

A complete workforce record. Ready in under 10 minutes.

PDF Report

Cover page, executive summary with Agentic Risk Score (0–100), compliance mapping across 9 frameworks, findings by surface, blast radius per agent, and auditor-ready chain-of-custody pages. Signed with Ed25519.

CSV Export

One row per finding. All surfaces. Import directly into Splunk, your SIEM, Excel, or Google Sheets.

All reports generated locally. Nothing uploaded. Nothing shared.

PRODUCT MODES

Start immediately. No account required.

Trial

No licence key required

See what's on your machine right now.

Download for Mac — Free

Demo

Click “Demo” on the configure screen

See a scripted scan of a fictional enterprise environment.

No real scan. No credentials needed.
Generates a real PDF from demo findings.

Popular

Pro

Valid SB-XXXX-XXXX-XXXX licence key

Complete picture — every surface, every agent, full evidence report.

Download for Mac — Free

Download Sunbeam. See your AI workforce in minutes.

macOS 12+. Signed and notarized. No Gatekeeper warning.

Download for Mac — Free

Windows coming soon.