Skip to content
CortexDocs
Defender · Activity controls

Pause and stop capture

Turn Defender off, change one app connection, or manage browser routing and certificate trust.

Updated
Review stop controls
  • Stop activity collectionPause collection on this device
  • Confirm direct connectionsWait for the completed off state
  • Control one pathKeep other sources running
From capture on to direct connections
Capture enabledOnEnabled sources use Defender.Through Defender
Wait for completionTurning offConnections are being restored.Check the app state
Confirm the resultOffDirect connections are confirmed.Direct to provider
Turning Cortex off is a transition. Wait for the completed Off state and confirmed direct connections; individual sources can have separate controls.

Use the power switch on Home to turn Defender off for the device. To change one app, use its switch in Connections.

  • CursorAgent and IDE history
  • Google ChromeBrowser connection

Turn Defender off

  1. Open Home.
  2. Turn off the switch beside Defender is on.
  3. Follow any action shown while Defender disconnects, including a browser restart when requested.
  4. Wait for Defender is off and Direct connection confirmed.
Defender off with direct connections confirmedManage devices in Cortex

When Defender is off, apps connect directly to their providers and Defender does not record new activity. Your app choices are saved for the next time you turn it on.

A turning-off or failed state does not confirm that direct connections have been restored. Follow the displayed recovery action or contact the Chaos Labs team.

Turn Defender on again

  1. Open Home and turn on the power switch.
  2. Wait for Defender is on.
  3. Send a new prompt from an enabled app, then verify capture and sync.

Restart an app when Defender asks.

Turn off one app

  1. Open Connections and select the app.
  2. Turn off Connect through Defender.
  3. Follow the app's restart or recovery instructions and confirm its resulting connection state.

Other enabled apps keep their own connection settings. Local MCP capture is managed with the Chaos Labs team.

Routing and certificate trust

Open Connections → Browser settings to manage Web routing and Certificate trust.

  • Turning off Web routing restores direct browser access; a browser restart may be needed.
  • Certificate trust controls trust in Defender's local certificate. The operating system may ask you to confirm a change.
  • Turning Defender off is not an uninstall. For device removal, follow Offboard or replace a device.
Was this helpful?

On this page

Turn Defender offTurn Defender on againTurn off one appRouting and certificate trust