security
tutanota
tutaoTuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
algo
trailofbitsSets up a personal VPN in the cloud. Ansible scripts deploy IPsec and WireGuard servers on your own instance in one go and produce client configurations, supporting several users and devices. It suits people with a cloud server who want a VPN for their own use.
exifcleaner
szTheoryA cross-platform desktop app that strips metadata from images. Dropping photos in removes EXIF details such as device, timestamp and GPS location, so sharing an image does not leak private information, with batch handling of images, PDFs and video. It suits people who want metadata gone before posting.
Shieldxy
RockxyAppAn open-source, auditable application firewall and connection monitor for macOS. It prompts on each program's network access so you can allow or deny it, lists current connections and traffic live, and keeps the code open for inspection. It suits people who want control over outbound traffic and verifiable tooling.
pareto-mac
ParetoSecurityAutomatically audits whether a Mac meets basic security hygiene. It checks system settings against a security baseline and reports pass or fail per item with remediation hints, helping bring a machine to a safer state. It suits onboarding device checks and periodic self-audits.
WhatsYourSign
objective-seeWhatsYourSign adds a menu item to Finder.app. Simply right-, or control-click on any file to display its cryptographic signing information!
TaskExplorer
objective-seeVisually explore all running tasks (processes) ....viewing its signature status, loaded dylibs, open files, network connection, and much more.
RansomWhere
objective-seeA general-purpose ransomware detector. It watches for file encryption behaviour and blocks and prompts when a process starts encrypting files in bulk, working without signatures so unknown ransomware is covered too. It suits people who want an extra layer of protection for important files.
OverSight
objective-seeOverSight monitors a mac's mic and webcam, alerting the user when the internal mic is activated, or whenever a process accesses the webcam.
LuLu
objective-seeA free, open-source firewall for macOS. It prompts for every program that tries to reach the network so you can allow or block it, remembers the choice as a rule and supports a silent mode. It suits people who want control over which apps get online without paying for a firewall.
KnockKnock
objective-seeLike AutoRuns, but for macOS. It lists everything that starts automatically, stays resident or runs on a schedule — login items, launch agents, kernel extensions, browser plugins — with signing and origin details, so you can see what is running on its own. It suits investigating unexpected startup items and security audits.
DylibHijackScanner
objective-seeScans the computer for apps vulnerable to dylib hijacking or already hijacked. It inspects how apps load dynamic libraries for paths that could be substituted, listing risky entries and confirmed hits, which suits security self-checks or investigating a suspected malicious library.
BlockBlock
objective-seeProvides ongoing protection by watching persistence locations. When something tries to install itself as a login item or background component, it asks whether to allow it, which helps surface persistence planted silently. It suits people who want to know if their system is being modified behind their back.
swiftGuard
LennoliumAn anti-forensics tray app for macOS that watches USB ports. It records and alerts on USB devices being connected, helping surface unusual physical access attempts as part of physical and operational security. It suits people concerned about who can touch their machine and who want a record.
keepassxc
keepassxrebootA cross-platform community port of the KeePass password manager. Vaults are encrypted files kept on your own machine with no cloud dependency, hardware keys such as YubiKey can serve as a second factor, and logins can be filled automatically in browsers and apps through extensions. It suits people who want to keep passwords entirely under their own control.
VPN-Bypass
GeiserXmacOS menu-bar app for fine-grained VPN routing: bypass the VPN for chosen domains/services, force others through it, or (Custom mode) route each domain/subnet out a specific egress — direct, a spe...
MakLock
dutkiewiczmaciejFree, open-source macOS app that locks applications with Touch ID, Apple Watch, and trusted Wi-Fi. The only open-source app locker for macOS.
stronghold
alichtmanA command-line tool that applies macOS security settings from the terminal. Hardening options scattered across preferences, the firewall and sharing services are collected into runnable commands, so one command tightens the defaults and changes can be rolled back. It suits developers, operators and anyone setting up a new machine who wants a more conservative security posture quickly.