Creating a Custom Worker

Use custom workers to define your own automated checks and run them on a schedule you set. Each run produces a briefing and can preview or apply write actions.

Custom workers you create appear with the Personal Custom tag. Workers shared with your organization appear with the Organizational Custom tag.

Permissions

• Every user with the AI Agents > View and interact permission can create their own personal custom workers.
• Creating an organizational custom worker (using Run as the AI Workforce) requires the Manage the AI Workforce permission and the global data scope.

Opening the Add Custom Worker Drawer

There are several ways to open the Add Custom Worker drawer:

• In My Workforce, select Create Custom Worker in the page header.
• In the Your custom workers section of My Workforce, select Add Custom Worker.
• On the Scheduled Workers page, select Add Custom Worker.
• On any Virtual Worker's card, select Schedule from the Run now dropdown. The drawer opens pre-filled with that worker's settings.

Configuring the Worker

Activate

The Activate toggle is on by default. Turn it off to create the worker in a paused state so it doesn't run until you're ready.

Title (required)

Enter a name for the custom worker. The name appears on the worker card in My Workforce and in the Workforce Hub.

Limits: up to 100 characters, unique per owner, no line breaks.

Prompt (required)

Enter the instructions the worker runs on each cycle. Write a clear description of what to find and what to do with the findings. The Prompt is the worker's full instruction set — there are no separate Standing Instructions.

Limits: up to 2,000 characters.

Example: "Find the open findings that clear the ticketing policy today, route them one ticket per owning team, and preview the tickets before they go live."

Description

Select Add description to add an optional description of what the worker checks. The description appears on the worker card.

Limits: up to 1,000 characters.

Department

Select the department the worker belongs to, for example Vulnerability Management or Endpoint Security. The worker appears under this department in My Workforce and in the Workforce Hub.

Workers with no department appear in the Other section.

Add to Favorites

Add to Favorites is on by default. This puts the worker in My Workforce when you save it. Turn it off if you don't want the worker to appear in My Workforce.

Recurrence

The Recurrence setting controls when the worker runs. Select one of two types:

Scheduled — Runs on a fixed interval:

• Every N Hours / Days / Weeks / Months
• Repeat on Days — Select specific days of the week.
• Run time — Set the time of day.

Event — Runs when something happens:

• Every Discovery cycle — Runs after each completed discovery cycle.
• Every successful adapter fetch — Runs after a successful fetch. Select the connection from Select Connection.

Write Tools

The Write tools section controls what the worker can do with its findings.

Each write tool has its own mode:

• Human in the loop — the worker previews the action and waits for your approval.
• Live — the worker applies the action automatically. Live mode requires Always approved for the corresponding tool in the Tool Permissions settings.
• Off — the worker doesn't take this action.

All tools sets the same mode for every write tool at once.

Users in a data scope do not have write tools available.

Run as the AI Workforce

Run as the AI Workforce makes the worker organizational — it runs under the AI Workforce account and uses the AI Workforce account's credit allowance. This option is visible only to users with the Manage the AI Workforce permission.

When Run as the AI Workforce is off, the worker is personal and uses the owner's credits.

Email Delivery

Select Email me each run's report to receive the worker's report by email after each successful run. The report goes to the owner's email address.

Email delivery requires Allow scheduled workers to email their reports to be on in General Settings.

Saving the Worker

Select Save. The worker appears in My Workforce immediately. Its first run happens at the next scheduled time. To run it immediately, select Run now on the worker card.

Editing, Pausing, and Deleting

To manage a custom worker, select its card in My Workforce or the Workforce Hub. A drawer opens with the following options:

• Run now — Runs the worker immediately.
• Edit — Opens the worker's settings for editing. Changes take effect from the next run.
• Delete — Permanently removes the worker.

If you cannot edit a worker, Create a copy appears instead of Edit.

To pause a worker without deleting it, open the drawer, select Edit, and turn off Activate. The worker keeps its settings but does not run.

Viewing a Custom Worker in the Workforce Hub

Custom workers appear in the Workforce Hub under the department you assigned. To show only custom workers, select the Custom Workers filter.

For more information, see Using the Workforce Hub.