free, open-source, tools to secure your Mac
🧑🏻💻 All tools are open-source: https://github.com/objective-see.
LuLu
⏳ Looking for older versions? Check out 'Releases' (of each tool's repository on GitHub).
In today's connected world, it is rare to find an application or piece of malware that doesn't talk to a remote server. LuLu is the free, open-source, firewall for Macs, that can protect your network connections and detect malicious activity.
Learn more »
Do Not Disturb
Physical access (or "evil maid") attacks are extremely insidious yet highly efficient.
Do Not Disturb detects and alerts you of such attacks!
Learn more »
KnockKnock
"KnockKnock... Who's There?" See what's persistently installed on your Mac. KnockKnock uncovers persistently installed software in order to generically reveal malware.
Learn more »
TaskExplorer
TaskExplorer allows one to visually explore all running tasks (processes). Quickly see a task's signature status, loaded dylibs, open files, network connection, and much more.
Learn more »
ReiKey
Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps.
Learn more »
Netiquette
Netiquette, a network monitor, allows one to explore all network sockets and connections, either via an interactive UI, or from the commandline.
Learn more »
BlockBlock
BlockBlock provides continual protection by monitoring persistence locations. Any new persistent component will trigger a BlockBlock alert, allowing malicious items be blocked.
Learn more »
RansomWhere?
By continually monitoring the file-system for the creation of encrypted files by suspicious processes, RansomWhere? aims to protect your personal files, generically stopping ransomware in its tracks.
Learn more »
OverSight
Mac malware often spies on users by recording audio and video sessions...sometimes in an undetected manner. OverSight monitors a mac's mic and webcam, alerting the user when the internal mic is activated, or whenever a process accesses the webcam.
Learn more »
KextViewr
KextViewr displays all loaded kexts, along with their signing status, full path, VirusTotal detection ratios, and more.
Learn more »
Dylib Hijack Scanner
Dylib hijack scanner or DHS, will scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.
Learn more »
What's Your Sign
What's Your Sign adds a ^-click menu item to Finder. Click it to display the code-signing information about any file.
Learn more »
Commandline Utilities
Various CLI utilities to facilitate system monitoring and malware analysis.
Learn more »