Privacy Ratings

macOS hardening

Santa privacy rating

A binary and file access authorization system for macOS that allows or blocks apps by hash, signing certificate or team ID. Created at Google and now maintained by North Pole Security.

United States Five EyesLicense: Apache-2.0Platforms: macOS

Summary

Santa scores 50 out of 100 (grade D) on the macOS hardening criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

Score 50 out of 100. How scoring works

Criteria

  • Yes

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    Apache-2.0.

    github.com

  • No

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    The agent reports only to a sync server chosen by the administrator, but the website loads Google Analytics.

    northpole.security

  • Yes

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Funded by North Pole Security's commercial management service, with no ads.

    northpole.security

  • No

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    No independent audit is published.

Other macOS hardening

All 5 macOS hardening