A friend at another tech startup was telling me how they started using Grok Bot and loved it. Surprise surprise they also got pretty worried about what it's doing and the visibility they had.

Digging under the hood, hey there's a Linux VM and a Chrome browser. This is really cool because it essentially defines an environment that is really similar to a typical workstation.

After some playing around I got the LimaCharlie EDR installed, the Chrome LC EDR installed and the email provider connected to the LC Email Security. Took a few iteration to make it all smooth but it works great on the free community edition!

So you get to see what is executing on the box, where the bot is browsing and emails in and out. I built a couple detections using AI and just made it a doc in our documentation so you can just tell Grok Bot:

""" Secure my Grok Bot with LimaCharlie by following https://docs.limacharlie.io/grok-bot/ """

The TL;DR; of what it does: - all of it goes to your own private tenant - installs a linux EDR on the box - installs a Chrome extension that is essentially an EDR in your browser - if you want, connects your gmail (any IMAP is supported really) and is like an EDR for the email - If you want it sends the alerts to your Grok Bot (I'm curious to see the advantage of a feedback loop here), or it's available on the web app.limacharlie.io

The other option I left in was to leave the CLI authenticated on the Grok Bot. The interesting bit about that is that because the CLI has 100% coverage of the platform, you can ask the Grok Bot to start setting up new alerts, investigate alerts, configure everything...

I tried to make it more generic for other AI agents where I have no idea what the environment is: https://docs.limacharlie.io/2-sensors-deployment/tutorials/s... though disclaimer I have not tried it yet, but it's not rocket science and more frontier AI models are now rocket scientists.

The advantage that Grok Bot has is that it fundamentally allows things to execute on the VM and talk out. The other ones (Muse, Dots) seem to proxy every single thing and generally be extremely difficult to extend.

Anyway, hope it helps some of you! (and yes, got it to make a cool video :D) https://youtu.be/yZZuBgKWd1k

Ask HN: What is going on with SMS 2FA?

Scala News – October 31st, 2026 Edition

Roko's Basilisk: The most rational idea in the world [video]

AI Bureaucracy Will Enable Total Surveillance [video]

Chess, but you can make the board bigger

Show HN: Gleanary – a personal knowledge library you can talk to, for macOS

Show HN: PinSharing – OSM static maps and geocoding you can cache forever

Motorola Signature 27 with GrapheneOS support

OCAP Bounded Authority: Edera's Managed Approach to Object Capabilities

Show HN: RippleMap – Map dependencies across GitHub repositories

Show HN: Roblox game idea generator I built with AI as a non-coder

Shotoku – local authorization layer for AI agents

Show HN: A Modern Agentic LaTeX Editor

Nvidia chips pile up in Hong Kong as China withholds import approval

Model Routing with Nvidia's NeMo Switchyard

Mistral Studio adds managed agents, workflows and apps

Show HN: Stroq – a local audit of what your coding agent did and why

Remote AI Jobs

Hiding a Rule Inside Another Model's Weights

Building a Multi-Agent System from Scratch: Architecture Patterns

Show HN: Securing GrokBot

Mercedes Gives Its Cars an AI Upgrade

Fonzi – Job board for problems to move humanity forward

Show HN: OldTunes – iTunes 4.9 for modern macOS (With GEISS)

How Much Does Reasoning Effort Affect Score and Cost?

Show HN: Northmeadow – encrypted shared memory for local AI agents and people

We beat DeepL at its strongest settings, 99 to 3

Ask HN: What are some good resources on encoded/encrypted search?

Brush paint mini-game inspired by spreading liquid

Stock Market Crash