Security

A check-up for the rest of your Mac.

DiskDuo reads the protections macOS already has — System Integrity Protection, Gatekeeper, FileVault, the firewall, XProtect — and says plainly which are on. It lists what starts by itself, which apps can see your screen or read every file, and what your browser extensions can reach.

  • Green, amber or red, by what it found
  • Login items and background agents, judged by signature
  • Permissions and extensions, in plain words
The security overview with the protections score and check cards

The protections macOS already has

Six checks, read from the system itself: System Integrity Protection, Gatekeeper, FileVault, the application firewall, XProtect and whether security responses install by themselves. Each one says what it means for this Mac in a sentence, and offers the System Settings pane that changes it.

What starts by itself

Login items, background agents and system daemons, merged from the task list macOS keeps and the launch property lists on disk. Each is judged by where its program lives and who signed it: leftovers pointing at programs that are gone are called out, and so is anything running from a temporary or hidden folder.

Who can see what

The permissions macOS asks you about — full disk access, screen recording, input monitoring, camera, microphone, automation — with the apps that hold each one. Reading them needs Full Disk Access, and DiskDuo says so rather than showing an empty list.

Browser extensions, in plain words

Extensions across Chrome, Brave, Edge, Arc, Vivaldi, Opera, Chromium, Firefox and Safari, with what each can actually reach. The ones that can read and change every site you visit are marked, and so are the ones installed from outside a web store.

Questions

About security.

Does this replace antivirus software?

No. It reads the protections macOS has and runs Apple’s own malware signatures on demand. It does not sit in the background watching every file, and it does not claim to.

Why does the permissions list need Full Disk Access?

macOS keeps those lists where only apps with Full Disk Access can read them. Without it DiskDuo says the list cannot be read, rather than showing nothing as though nothing were granted.

Try it on your own Mac.

One payment, no subscription. Signed and notarized by Apple.

Download DiskDuo