CoreLock is a free AI-powered Mac security app that scans for malware, audits privacy permissions, monitors network connections, and fixes issues in one click. It uses behavioral analysis, YARA rules, and hash-based detection — all running locally on your device. CoreLock scans 8 security areas in under 60 seconds: running processes, network connections, app certificates, privacy permissions (camera, microphone, screen recording), startup items, file system health, and system performance. Free tier includes 3 scans per day. Pro is $4.99/month with unlimited scans and auto-fix. Available for macOS (Apple Silicon and Intel) and Windows.
CoreLock scans processes, network, files, certificates, and permissions — then tells you, plainly, what's normal and what isn't. Under 60 seconds. 100% local. Free forever.
“PUP.Optional.BundleInstaller detected.” What does that mean? Is it bad? Your guess is as good as ours.
260 processes. Most are fine. Three are not. You have no idea which are which — and neither does Apple, who built it.
When you last checked: never. Screen recording, microphone, full disk access — someone has them. Do you remember who?
Traditional antivirus checks hashes against a database of known threats. CoreLock watches behavior — process trees, network destinations, permission combinations — and flags patterns that look like spyware, even if no one has seen it before.
Which apps have your camera, mic, screen, and full disk. Revoke with one click.
See every outbound connection, where it's going, and which app opened it.
Check every signed app. Flag revoked, unsigned, or expired certificates.
What actually launches when you boot up. Kill the ones you don't need.
Combines ClamAV's open rule set, VirusTotal-compatible hash lookups, and YARA pattern matching. On-demand or scheduled. Deep scan your Downloads folder, external drives, or the whole disk.
Find the app eating 40% of your CPU while you sleep. Find the login item that adds 18 seconds to every boot. Fix, don't panic.
6 MB download. No account, no credit card, no email capture. First scan starts the moment you open the app.
Click once. Under a minute. The scanner walks through 8 modules — processes, network, files, certs, startup, permissions, privacy, performance.
Plain-English explanations. Everything is sorted by how worried you should actually be. One-click fixes for the ones you care about.
This process has opened 14 outbound connections in the last hour to an IP that doesn't appear in any legitimate software's known server list. Most users on your system have never installed MacKeeper.
This executable isn't signed by a developer Apple knows about. Programs that run from Downloads and aren't signed are unusual. It's either something you installed and forgot about, or something you didn't install at all.
| Capability | CoreLock | Norton | Malwarebytes | CleanMyMac |
|---|---|---|---|---|
| Plain-English explanations | Yes | Jargon | Jargon | Yes |
| AI behavioral analysis | Yes | Signature only | Limited | No |
| TCC permission audit | Yes | No | No | No |
| Runs 100% locally | Yes | Cloud-assisted | Cloud-assisted | Yes |
| Full system scan time | Under a minute | 4–8 min | 2–3 min | ~1 min |
| Aggressive upsell pop-ups | None | Constant | Frequent | Occasional |
| Free tier | 3 AI scans/day | Trial only | Scanner only | Limited |
| Monthly price (Pro) | $4.99 | $7.99–$12.99 | $6.67 | $9.96 |
Comparison based on publicly listed pricing and documented features as of April 2026. All trademarks property of their respective owners.
Everything you need to know what's on your computer. No credit card. No account.
Unlimited scans. Auto-fix. Deep file scanning. AI chat to ask questions about anything it finds.
For small businesses managing 5–50 Macs. Shared dashboard. Fleet-wide scans. Compliance reports.
Download CoreLock. Run one scan. It takes less time than reading this paragraph — and you'll know more about your computer than most of its owners ever will.