Try Pro free for 14 daysHeyBrain is now live for general availability; join leading teams using HeyBrain!Start Free

SOLUTIONS · IT AND SECURITY TEAMS

AI for cybersecurity and IT teams, with access you control

Use AI for cybersecurity to inspect knowledge access, agent scopes and activity records. Bring concrete answers into your security review.

  • Runbooks.
  • Ask from Claude, Cursor or Codex.
  • Keep private knowledge private.

Built for IT managers, Security engineers, CISOs, MSPs

What's our runbook for a lost laptop?

The device runbook identifies the IT owner and reporting route. The access checklist covers the affected accounts. 1

Runbooks

Approve it. Scope it. Prove it.

Your IT managers and security engineers share answers with sources.

  • IT managers

    Runbooks

    • What's our runbook for a lost laptop?

      On request

    • Who owns the device-reporting route and affected-account checklist?

      Before deciding

    Source answer: The device runbook identifies the IT owner and reporting route. The access checklist covers the affected accounts.

    • Open the current source before the next step

    Sources: Runbooks (Google Drive); Tern House · Supporting notes (Notion).

    Reads from
    • Google Drive
    • Notion
  • Security engineers

    Agent keys and scope

    • Which agents can read finance?

      Weekly

    • Which collection can the finance assistant read that general support keys cannot?

      Before deciding

    Source answer: The agent registry lists the finance assistant and its permitted collection. General support keys cannot read finance documents.

    Sources: Agent keys and scope (Notion); Tern House · Supporting notes (Google Drive).

    Reads from
    • Notion
    • Google Drive
  • CISOs

    The access record

    • Which people and agents accessed which sources, and when?

      On request

    • Which key scope and workspace rules apply to this recorded request?

      Before deciding

    Source answer: The access record identifies people and agents, request times and sources touched. Review the associated key scope and workspace access.

    People, agents, times and sources
    The access record identifies people and agents, request times and sources touched.
    Key scope and workspace access
    Review the associated key scope and workspace access.

    Sources: The access record (Google Drive); Tern House · Supporting notes (Notion).

    Reads from
    • Google Drive
    • Notion
  • MSPs

    Revoke an agent

    • How do I end one agent’s knowledge access?

      Weekly

    • How do we verify knowledge access ends for the revoked key without changing other agents?

      Before deciding

    Source answer: Revoke the agent's key to end its knowledge access. Other agents keep their own keys and scopes.

    Sources: Revoke an agent (Notion); Tern House · Supporting notes (Google Drive).

    Reads from
    • Notion
    • Google Drive
  • IT managers

    One HeyBrain per client for MSPs

    • Which client workspace should I use to investigate this request?

      On request

    • Which client workspace and agent identity belong to this request?

      Before deciding

    Source answer: Keep each client's knowledge and agent identities separate. Select the client workspace before investigating a request.

    Selected for this question: Tern House. Each scope keeps its resources together.

    Tern House (selected)
    Client knowledge; Agent identities
    Another client (separate context)
    Client knowledge; Agent identities

    Answer from Tern House, linked to the source.

    Sources: One HeyBrain per client for MSPs (Google Drive); Tern House · Supporting notes (Notion).

    Reads from
    • Google Drive
    • Notion
  • Security engineers

    Helpdesk answers

    • How do I reset MFA?

      Weekly

    • Who is authorized to handle the MFA recovery procedure?

      Before deciding

    Source answer: The identity guide links the MFA recovery procedure and authorized support owner. The answer retains that source.

    • Open the current source before the next step

    Sources: Helpdesk answers (Notion); Tern House · Supporting notes (Google Drive).

    Reads from
    • Notion
    • Google Drive

Less searching. More shared context.

Without HeyBrain

With HeyBrain

Search the device runbook and access checklist to work out whom to notify about a lost laptop and which accounts are affected.

Find the IT owner and reporting route in the device runbook, with affected accounts covered by the access checklist.

Compare agent-registry entries and collection permissions to identify which agent can read finance.

Find the finance assistant and its permitted collection while general support keys remain unable to read finance documents.

Collect requester, time and source details before checking the associated key scope and workspace access.

Find the people and agents, request times and sources touched in the access record, then review their key scope and workspace access.

Check which agent key to revoke and how the other agents are scoped before ending one agent’s access.

Revoke that agent’s key to end its knowledge access while other agents keep their own keys and scopes.

ONE CONNECTED BRAIN

One question, across your tools

Bring Google Drive, Notion and your uploads into one cited answer.

Question
What's our runbook for a lost laptop?
Answer
The device runbook identifies the IT owner and reporting route. The access checklist covers the affected accounts. (Source 1)
  • Source 1: Runbooks (Google Drive)
  • Additional source: Agent keys and scope (Notion)
  • Additional source: The access record (Google Drive)

FOLLOW THE SOURCE

Review the evidence behind an answer

Open the citation. Read the original wording and surrounding detail.

Answer
The agent registry lists the finance assistant and its permitted collection. General support keys cannot read finance documents. (Source 1)
Cited excerpt from Agent keys and scope (Notion)
The agent registry lists the finance assistant and its permitted collection. General support keys cannot read finance documents.
  • Source 1: Agent keys and scope (Notion)
  • Source 2: Runbooks (Google Drive)

PERMISSIONS IN EVERY ANSWER

Share the context. Keep the boundaries.

Same question, different permissions. Review the request and sources in the access record.

Question
What does the access review require?
Answer for Omar Moreau (Security reviewer)
Access policy and request process available. Finding: remove shared administrator access.
Answer for Elise Navarro (Team manager)
Access policy and request process available. Restricted section withheld.
Section withheld from Elise Navarro
SECURITY FINDINGS · REVIEWERS ONLY
Access record
14:02 · Elise Navarro · Source access checked · 1 SECTION WITHHELD · RECORDED

Company knowledge, under your control

Permissions you already have

Answers respect source access.

Every agent gets its own key

Set its scope. Revoke its key.

A record of every access

Review requesters, sources and access decisions.

Review provider data terms

Check provider data use and retention.

Bring your own model key

Connect your model to governed knowledge.

LESS CONTEXT. LOWER COST.

Send less context per task

HeyBrain sends only the context a task needs.

Repeated contextWhole documents
With HeyBrainRelevant passages

FAQ

Questions IT and security teams ask

  • What's our runbook for a lost laptop?

    The device runbook identifies the IT owner and reporting route. The access checklist covers the affected accounts. Ask follow-ups in the same conversation and open each citation to check the surrounding detail, then share the source with colleagues who can access the same collection.

  • Which agents can read finance?

    The agent registry lists the finance assistant and its permitted collection. General support keys cannot read finance documents. Connect the relevant Drive folder or Notion pages, or upload documents, then follow citations to their original passages from the AI tools your colleagues already use.

  • Which sources and AI tools can we use?

    Connect Google Drive, Notion and document uploads; Claude, Cursor and Codex ask your company knowledge through HeyBrain MCP. Keep decisions and references available where your team works. HeyBrain supplies knowledge; agents use their own tools for actions requested by the user.

  • How does HeyBrain keep private knowledge private?

    People and agents receive answers from sources they can open. Workspace rules restrict the audience; each agent has its own key and scope. Administrators review requesters, times and source references in activity records alongside workspace membership and source access rules.

  • How do we get the team started?

    Connect your team’s current brief, decision notes and working guide, invite the people who need them and ask a familiar question. Open its source citations before expanding the collection. Align workspace membership and individual agent scopes with each team’s responsibilities.

  • How does HeyBrain reduce AI token cost?

    HeyBrain sends only the context a task needs instead of repeatedly passing whole documents to your AI tool. Use the context calculator to compare the amount you send and your input price. Your team shares the same connected knowledge across tools, so every new conversation can start with the relevant passages and their sources.

/ Get started today

Put your company knowledge
to work with HeyBrain