All resourcesProduct note1 min read

A company rule can only add care

Security teams can add their own rules. No rule, missing file or failed update can switch the protection off.

Sting Labs· 26 Sep 2026
The Sting mascot adds an extra bar and a padlock to the outpost gate while loose papers blow around harmlessly.

The worry

Once a company can push rules to every laptop, the obvious fear is a rule that quietly loosens the guard, or a laptop that cannot fetch its rules and decides that means there is no guard at all.

How rules work

A company rule can name more things to watch, ask for a human to approve certain actions, or treat a folder as sensitive. It cannot turn a check off, and it cannot make an existing catch weaker.

In plain words

You can add locks to the gate. You cannot take the gate away.

When things break

If the rule file is missing, malformed, or the fetch fails, the laptop keeps the protection it already had. Failures fall toward less extra care, never toward less protection.

Keep reading

All resources

See Sting guard your agents.

Book a 20-minute demo with a Sting expert. We'll walk through Observe and Protect on the kind of work your agents already do.

Book a demo