Directory / OpenAI dots
OpenAI dots
An always-on agent with its own cloud computer. Admins decide per role whether dots can browse, reach the network, use computers or touch a local machine. By default an automatic review, not a person, decides most approvals.
Lock this down first
Leave local computer access off, and restrict app actions in Plugin controls before turning dots on.
Scorecard
| Criterion | Rating | Notes |
|---|---|---|
| Permission granularity | 2/3 | Workspace owners can turn dots access and capabilities (cloud browser, network, computer use, password manager, local computer) on or off per role. Coarse on/off switches. |
| Human approval gates | 1/3 | Automatic approval checks apply from the start: review decides whether a dot proceeds, needs your approval or hands a step to you. |
| Sandboxing | Unverified | Not confirmed in the docs we checked. |
| Secrets handling | 2/3 | Sign-in credentials go into a private form outside the conversation. Reusing a saved login needs your confirmation. |
| Audit logs | Unverified | Not confirmed in the docs we checked. |
| Kill switch / interrupt | Unverified | Not confirmed in the docs we checked. |
| Network egress control | 1/3 | Admins can turn Cloud network access on or off. No destination allowlist is documented. |
Sources
Vendor? Request a correction. We review corrections within 7 days.