๐Ÿง‘๐Ÿปโ€๐Ÿ’ป   The source code for our tools can be found on github: https://github.com/objective-see.
LuLu

In today's connected world, it is rare to find an application or piece of malware that doesn't talk to a remote server. LuLu is the free, open-source, firewall for Macs, that can protect your network connections and detect malicious activity.

Learn more ยป


Do Not Disturb

Physical access (or "evil maid") attacks are extremely insidious yet highly efficient.
Do Not Disturb detects and alerts you of such attacks!

Learn more ยป


KnockKnock

"KnockKnock... Who's There?" See what's persistently installed on your Mac. KnockKnock uncovers persistently installed software in order to generically reveal malware.

Learn more ยป


TaskExplorer

TaskExplorer allows one to visually explore all running tasks (processes). Quickly see a task's signature status, loaded dylibs, open files, network connection, and much more.

Learn more ยป


ReiKey

Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps.

Learn more ยป


Netiquette

Netiquette, a network monitor, allows one to explore all network sockets and connections, either via an interactive UI, or from the commandline.

Learn more ยป


BlockBlock

BlockBlock provides continual protection by monitoring persistence locations. Any new persistent component will trigger a BlockBlock alert, allowing malicious items be blocked.

Learn more ยป


RansomWhere?

By continually monitoring the file-system for the creation of encrypted files by suspicious processes, RansomWhere? aims to protect your personal files, generically stopping ransomware in its tracks.

Learn more ยป


OverSight

Mac malware often spies on users by recording audio and video sessions...sometimes in an undetected manner. OverSight monitors a mac's mic and webcam, alerting the user when the internal mic is activated, or whenever a process accesses the webcam.

Learn more ยป



KextViewr

KextViewr displays all loaded kexts, along with their signing status, full path, VirusTotal detection ratios, and more.

Learn more ยป



Dylib Hijack Scanner

Dylib hijack scanner or DHS, will scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.

Learn more ยป


What's Your Sign

What's Your Sign adds a ^-click menu item to Finder. Click it to display the code-signing information about any file.

Learn more ยป


Commandline Utilities

Various CLI utilities to facilitate system monitoring and malware analysis.

Learn more ยป