# Open-source macOS hardening

5 open-source macOS hardening rated against public privacy criteria.

1. [BlockBlock](https://privacyratings.com/macos-hardening/blockblock/): B (80/100). A free macOS tool from Objective-See that monitors common persistence locations and alerts when software tries to install itself to run at startup.
2. [KnockKnock](https://privacyratings.com/macos-hardening/knockknock/): B (80/100). A free macOS tool from Objective-See that lists software installed to run persistently, such as launch agents, login items and extensions, to help find malware.
3. [OverSight](https://privacyratings.com/macos-hardening/oversight/): B (80/100). A free macOS tool from Objective-See that alerts when the microphone or webcam is turned on and shows which process is using it.
4. [Stronghold](https://privacyratings.com/macos-hardening/stronghold/): B (80/100). A command-line tool that configures macOS firewall, logging, sharing and other security settings. It was designed for older macOS releases.
5. [Santa](https://privacyratings.com/macos-hardening/santa/): D (50/100). A binary and file access authorization system for macOS that allows or blocks apps by hash, signing certificate or team ID. Created at Google and now maintained by North Pole Security.

Source: https://privacyratings.com/open-source/macos-hardening/