Docs

ChatGPT Desktop, Comet and Grok

Apps that act in their vendor's cloud or in a browser, with nothing on the laptop for ZYBE to check one action at a time. ZYBE sees them, and can refuse them outright.

What ZYBE can do

See that they're installed, which version, on which laptops, and who owns them. In the console they show Seen, and the issue Agent that can't be blocked is raised once per app so you decide.

And refuse them. Name the product under Rules, Refused products, and every laptop with a whole-machine install takes away the app's permission to run, ends it if it's open, and shows Not allowed. See Refuse an AI app.

Why they can't be judged one action at a time

Claude Code runs a command on the laptop, and asks ZYBE first. ChatGPT Desktop, Comet and Grok do their work in the vendor's cloud or inside a browser. There's no moment on the laptop where they're about to do something ZYBE could stop. So the decision is about the product, not the action: allowed here, or not.

What you can do

• Know where they are: Inventory, Agents.
• Decide whether they're allowed in your company. If not, refuse them, and tell people.
• If a laptop's owner uses one for work, the keys and files on that laptop are still listed under Issues, because the same laptop usually has a tool ZYBE does cover.