Community guide to securing and improving privacy on macOS.

软件安全工程师技能表

A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.

《macOS软件安全与逆向分析》随书源码

World's first Face Authentication enabled MacOS App-locker. Unlock your Mac apps using Face , TouchID or password. Completely local and encrypted - your data never leaves your Mac

macOS cleanup and security auditing tool for developers

Mergen is an open-source, native macOS application for auditing and checking the security of your MacOS.

Free, open-source macOS app that locks applications with Touch ID, Apple Watch, and trusted Wi-Fi. The only open-source app locker for macOS.

Macos Malware Samples

Audit and fix your Mac's security in one command. No agent, no signup, open source.

Guide to Securing a Modern Apple Computer

Threat-feed IP block automation for Linux and macOS firewalls (iptables, nftables, pf) with cron-ready updates, dry-run previews, and package releases.

A library of post-exploitation MacOS scripts based on threat emulation, LOObins, CTI, and MITRE ATT&CK.

《macOS软件安全与逆向分析》勘误

macOS privacy & security toolkit — Don't trust Apple. Verify. YOUR machine, YOUR rules.

Detecting task_for_pid and pid_for_task via CS_INVALID_ALLOWED. First public detection method pid_for_task.

Intelligent macOS security scanner that identifies unsigned apps, Gatekeeper violations, and suspicious persistence mechanisms with context-aware risk assessment. No false positive fatigue.

Single-file macOS security audit script. Checks firewall, FileVault, SIP, listening ports, AI agents, LaunchAgents, SSH config, and more.

MyCryptFS - Keep sensitive files private in the Cloud. Encrypt any folder on macOS (Apple Silicon) using Gocryptfs, with full native Finder integration.

App Trust Preview is a Mac app that helps you inspect apps, installers, disk images, executables, and scripts before opening them. It turns local macOS security signals into readable reports about signing, notarization, permissions, sandboxing, bundled code, package contents, and other trust indicators.