Crimson Ray Desktop

An AI assistant for security teams · macOS and Windows

What it is

Crimson Ray Desktop is an application that security professionals install on their own computer. It runs an AI assistant that investigates questions across the systems the user connects, such as cloud, identity, endpoint, ticketing, and collaboration tools, and reports what it finds with links back to the source records. Every action that changes something outside the app, such as sending an email or editing a document, is shown to the user and runs only after the user approves it.

Crimson Ray Desktop is available to organizations working with Crimson Ray Inc. To request access, email hello@crimsonray.ai.

Google Workspace connection

A user can choose to connect their own Google account. When they do, the app opens Google’s sign-in page in their browser, and Google shows exactly which permissions the app is requesting. The user can grant or decline each one. The connection lets the assistant work with that user’s own data, at their request:

• Gmail — search and read messages and attachments the user asks about, for example to review a reported phishing email; draft replies; and, after the user approves each one, send a message or change its labels.
• Google Drive, Docs, and Sheets — find and read files relevant to an investigation, and, after approval, create or update documents and spreadsheets, such as an incident report.
• Google Calendar — read the user’s schedule and, after approval, create or update events, such as an incident review meeting.
• Google Contacts — look up colleagues’ contact details and, after approval, add or update a contact.

The assistant uses this access only to carry out tasks the user asks for in the app. It does not read the user’s data in the background for any other purpose.

How your Google data is handled

• Google sends the authorization directly to the app on the user’s computer. The access token is stored in the operating system’s secure credential store (the macOS Keychain or Windows Credential Manager), or in a secret manager the user’s organization has configured. It is not sent to Crimson Ray.
• The app calls Google’s APIs directly from the user’s computer. Data it retrieves is used to answer the user’s request and is shared only with the AI model provider that the user or their organization has configured, for that purpose.
• We do not sell Google user data, use it for advertising, or use it to train AI models.

The full details are in the Google user data section of our Privacy Policy. Crimson Ray’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting

A user can remove the Google connection at any time in the app, under System → Connectors, which deletes the stored token from their computer. They can also revoke the app’s access from their Google Account at myaccount.google.com/connections.

Contact

Crimson Ray Inc.
4546 El Camino Real B10 #832
Los Altos, CA 94022
hello@crimsonray.ai
+1-650-200-3428