Know who can read your typing
Every program that can read the keyboard, with who made it. A new one from an unknown developer raises an alert.
All your Mac security checks in one app
Firewall, startup items, camera and mic alerts, ransomware warnings and more. Each one explains what it found in plain words.
Money back within 30 days.
One licence, three Macs.
Every feature at a glance
Select a feature to read more about it.
Live protection
Watches your Mac all the time and tells you as soon as something changes.
- FirewallChoose which apps can go online, and see where they connect.
- Network monitorWhich apps connect, where to, and how much each one sends.
- Spy CheckFinds out if files are leaving your Mac or anything is watching you.
- Camera and micTells you which app turned them on, and keeps a history.
- Keyboard spyingShows every program that can read what you type.
- Wi-Fi, VPN and trackersChecks your network and VPN, and spots unknown AirTags near you.
- Ransomware GuardWarns you as soon as files start being encrypted, with a safe self-test.
- Away Mode and USBAlerts you, with a photo, if someone opens your Mac while you're out.
- Live ActivityEverything happening on your Mac, as it happens, in one list.
Scans
Looks through what's already on your Mac, any time you ask.
- Virus scanApple's XProtect rules, VirusTotal's 70+ engines and ClamAV.
- Running apps and startup itemsWho made every program, and what starts with your Mac.
- App permissionsWhich apps can see your screen or reach your files, and since when.
- Extensions and AI toolsBrowser and system add-ons, and the tools AI apps can run.
- App hijack checkFinds apps whose code could be swapped, or already was.
- System checkMakes sure FileVault, updates, backups and the rest are on.
Tools
Tools for checking files, links and apps.
- Check a file or websiteKnow what a download or link is before you open it.
- Remote-control scam warningsExplains the scam if AnyDesk or TeamViewer appears.
- UninstallerRemoves an app with the files it leaves behind, into the Trash.
- What is this program?Plain answers for the macOS programs you've never heard of.
- Weekly summary and exportA short note each week, and your full history as a file.
- Report a false alarmSend a report when an alert was wrong, so the check gets better.
Control which apps can go online
The first time an app tries to reach the internet, Aegisrook stops it and asks. Your answer sticks, for the whole app or just one website.
See which apps are online, how much they send, and which countries their servers are in. Add blocklists of known malware and phishing sites with one switch.
Some Apple system traffic doesn't pass through any app firewall, so Aegisrook can't see it.
Know what's running, and what starts with your Mac
Every program running right now, with who made it. The ones from unknown developers are marked.
Everything set to start with your Mac, in one list: login items, background items and scheduled jobs. When something new appears, you're told who made it, and you choose to keep it or move it to the Trash.
Removing a startup item stops a program starting by itself. It doesn't uninstall the program.
Know the moment your camera or mic turns on
An alert names the app as soon as the camera or microphone turns on, and a history shows which apps used them, and when.
macOS doesn't always say which app turned the camera on. When it doesn't, Aegisrook says so instead of guessing.
Find out if anything is watching you
Spy Check looks for files leaving your Mac, apps that can see your screen or read what you type, and traffic being sent somewhere it shouldn't.
Each answer says what was checked. When it can't tell, it says that too.
Text expanders and window managers need keyboard access for good reasons. Each one is listed with who signed it, so you can tell them apart.
Early warning if files start being encrypted
Aegisrook watches your personal folders for files being encrypted, and optional decoy files raise the alarm the moment they change. It can also pause the program doing it.
Not sure it works on your Mac? Run the safe test: it writes a few harmless files the way ransomware would, shows you that they were caught, then cleans up.
A backup is still the only reliable answer to ransomware. This buys you time; it doesn't replace Time Machine.
Scan for known Mac malware
Scan your Mac with Apple's own malware rules, and add VirusTotal and ClamAV if you want a second and third opinion. Each one explains what it is, what it checks and what leaves your Mac: for VirusTotal, only a file's fingerprint, never the file.
Aegisrook isn't an antivirus engine. Brand-new or targeted malware can get past all three.
Check the security of your network
See the networks you've joined, with checks on your router and DNS. Get an alert if an unknown AirTag or tracker is moving with you.
Using a VPN? Aegisrook checks that it's on, that your website lookups go through it rather than leaking to the network, and tells you if it disconnects while you're on public Wi-Fi.
Know if someone used your Mac while you were away
Turn on Away Mode when you step out. When you come back, you'll see whether your Mac was opened or anything was plugged in.
More checks and tools
Additional tools included with every licence.
Watch it all as it happens
Live Activity lists apps starting, connections, camera use, downloads and devices as they happen. Simple shows only what's worth a look.
Find apps that could be hijacked
Finds apps that load code from places another program could write to, and code that was swapped after the app was signed.
Remove apps completely
Removes an app along with the settings, caches and helpers it leaves behind. Everything goes to the Trash, so you can put it back.
See which apps have access
Which apps can use the camera, see your screen or reach your files, and an alert when one is newly given access.
Spot risky extensions
Browser extensions, system extensions, and the tools AI apps such as Claude and Cursor can run. One that downloads and runs code is flagged.
Warnings for remote-control scams
Installing AnyDesk or TeamViewer raises an alert that explains the tech-support scam these apps are used for.
Check a file or link first
Who signed a file and whether Apple notarized it. For a website: blocklists, look-alike names and how new the domain is.
Look up any Mac program
Common macOS programs explained: what each is, who makes it, and what happens if you block it.
See if Mac's own protections are on
FileVault, the macOS firewall, Gatekeeper, software updates and backups, each with what to do if it's off.
A weekly summary
A short note once a week, and an export of the full history whenever you want it.
Report a false alarm
On every alert. It writes the report on your Mac, and you read it before anything is sent.
Find out what's really running on your Mac
Pay once and keep it for good.
Not for you? Get a full refund within 30 days.
- macOS 14 or later
- Apple silicon and Intel
- Notarized by Apple
- One licence, three Macs