Skip to main content

CoreLock is a free Mac security app that runs a six-check scan on your Mac: running apps, network (services listening beyond this Mac), app permissions, login and background items, running AI agents, and the Downloads folder (checked against a built-in list of known-malware hashes and malware-signature rules). The results become a 0–100 Security Score and a list of findings explained in plain English. The scan runs on your Mac; optional AI explanations (off by default) send a summary to our servers, never your files. Free includes unlimited scans and 3 AI scan reviews a day. Pro is $9.99/month, $50/year, or $200 once for Lifetime, with deep file scans, AI scan reviews without the daily limit, optional sync and priority email support. Available for macOS 13+ (Apple Silicon and Intel). No account needed for the local checks.

v2.0.4 · Six-check scan

See what's running
on your Mac. In English.

CoreLock checks running apps, network, permissions, login items, AI agents and your Downloads folder, then tells you, plainly, what needs a look. Local-first. Free.

MACOS 13+No credit card. No account for local checks.
Illustration · Running apps check
Checking
100busiest processes
Check
1of 6
Progress
xmrig~/Library/Application Support/.cache/xmrig203.0.113.44:333392.4%flag
ncnc -l 4444*:44440.1%flag
WindowServer/System/Library/…/WindowServer—3.8%
Slack Helper (Renderer)/Applications/Slack.app/…/Slack Helper198.51.100.12:4431.2%
Arc Browser/Applications/Arc.app/Contents/MacOS/Arc172.67.12.4:4436.1%
1Password 8/Applications/1Password.app/…198.51.100.40:4430.3%
Raycast/Applications/Raycast.app/…—0.4%
Example data, not a real scan
2 flagged
1
Click to scan
6
Checks in every scan
Local
First — core scanning on your Mac
$0forever
Free tier, no card
01 — The problem

Your computer is talking. You just can't understand it.

A

Antivirus speaks a language designed to sell you things.

“PUP.Optional.BundleInstaller detected.” What does that mean? Is it bad? Your guess is as good as ours.

⚠ Threat found: Trojan.GenericKD.68421993
Action: Upgrade to Premium
B

Activity Monitor shows everything. Explains nothing.

260 processes. Most are fine. Three are not. You have no idea which are which — and neither does Apple, who built it.

PID PROCESS %CPU
29847 com.apple.Wh… 42.1
14029 launchd_helper_v2 18.3
...and 258 more.
C

Every app has permissions. You granted them all years ago.

When you last checked: never. Screen recording, microphone, full disk access — someone has them. Do you remember who?

Example
Camera — 7 apps
Microphone — 11 apps
Contacts — 4 apps
02 — The difference

One scan. Six checks your Mac never shows you in one place.

A security score that shows its work.

Every scan checks running apps, network, app permissions, login and background items, AI agents and your Downloads folder, then turns the results into a 0–100 Security Score. A check that can't run is shown as not checked, never counted as passed.

6CHECKS
0–100SECURITY SCORE
15 minBACKGROUND RESCAN
THE SCAN

Privacy permissions

Which apps hold camera, microphone, Screen Recording, Accessibility and Full Disk Access, and which removed apps left access behind. Revoke opens the right page of System Settings.

Needs Full Disk Access

Open doors

Services listening beyond this Mac, and your apps' open connections by IP address and port.

Network screen

App signatures

Re-verify the apps in your Applications folders. Flags unsigned apps and broken or expired signatures.

Apps screen

Login and background items

Each scan reviews your LaunchAgents and LaunchDaemons folders and flags unsigned or unusual items. You decide what to remove.

LaunchAgents & Daemons

Downloads check

Every scan checks the files in your Downloads folder against a built-in list of known-malware hashes and CoreLock's malware-signature rules, and scores scripts and installers with simple heuristics. A signature match is worth a look, not proof. Pro's Full scan adds Documents, Applications and the launch folders.

AI agent snapshot

See what running AI agents like Claude Code and Cursor have open: files, network connections and child processes. A snapshot, not a recording.

AI Agents screen
03 — How it works

Three steps. No PhD in security required.

STEP 01

Install & open.

Free download, no credit card. The local checks need no account.

CoreLock.dmg~210 MB
STEP 02

Run a scan.

Click Scan. CoreLock runs six checks: running apps, network, app permissions, login items, AI agents and Downloads.

APPS ✓NET ✓PERMISSIONS…AGENTS
STEP 03

Read & decide.

Plain-English explanations, sorted into Needs action and Worth a look. Some offer Quit or Quarantine; most point you to the right setting.

⚠ Unsigned login item
→ “com.example.helper” starts at login
   and isn't signed by a known developer.
04 — Inside the app

Built for clarity. Not for anxiety.

ILLUSTRATION — EXAMPLE DATA, NOT A SCREENSHOT
CHECKS
Running apps● 1
Network● 0
App permissions● 0
Login items● 1
AI agents● 0
Downloads● 0
ISSUES · 2 FINDINGS
Two things need a look.
xmrig, a known crypto miner, is running.

This program mines cryptocurrency with your Mac's processor. If you didn't install it on purpose, quit it, then find out how it got here.

NEEDS ACTIONRUNNING APPSPID 29847
com.example.helper starts at login and isn't signed.

A launch agent in your Library folder starts this helper every time you log in, and it isn't signed by an identified developer. If you don't recognize it, remove it.

WORTH A LOOKLOGIN ITEMS~/LIBRARY/LAUNCHAGENTS
CHECKS RUN
6 of 6
NEEDS ACTION
1
WORTH A LOOK
1
05 — What's included

What CoreLock checks.

CapabilityCoreLock
Plain-English explanationsYes
Optional AI explanations of your scansYes (off by default)
Privacy permissions listYes (needs Full Disk Access)
App signature and notarization checkYes (on demand)
Login and background itemsYes
Services open to your networkYes
AI agent snapshotYes
Real-time blockingNo
Monthly price (Pro)$9.99 ($50/yr)
06 — Pricing

Free forever. Pro when you need it.

FREE$0

Free

$0/ forever

The full six-check scan, free. No credit card, and no account for the local checks.

  • Unlimited six-check scans
  • Running apps and open-doors checks
  • Privacy permissions list
  • Login and background items
  • AI agent snapshot
Download free
BUSINESSB2B

Business

$29/ month

Pro for a team's Macs. Includes 3 seats, then $7/seat per month.

  • Everything in Pro
  • 3 seats included, then $7/seat/mo
  • Priority email support

After purchase, create your team and invite people from Account, at the bottom of CoreLock's sidebar. Members get everything in Pro.

See Business plans
07 — Frequently asked

Objections, handled.

Macs don't get viruses, right?

+
Macs get malware — just at a lower rate than Windows, and often in forms Apple's built-in Gatekeeper doesn't catch. Adware bundlers, info-stealers that run unsigned from Downloads, and spyware-style apps with camera/mic permissions are all common on Macs. CoreLock doesn't assume you're infected; it shows you what it checked and what needs a look.

Is my data going to your servers?

+
Only if you turn on a feature that needs it. The scan runs on your Mac and needs no account. AI explanations and file reputation checks are off by default. With AI explanations on, each scan you start sends a summary: system stats, the 25 busiest program names with process ID, CPU and memory, connection counts and disk totals. Never your files. With file reputation checks on, the SHA-256 fingerprints of scanned files are checked online, never their contents. Signing in and update checks also reach our servers. See the privacy policy for the full list.

What does CoreLock look at?

+
Six checks: running apps (known-bad tools and risky command lines), network (services listening beyond this Mac), app permissions (access left behind by removed apps), login and background items, running AI agents, and your Downloads folder (a built-in list of known-malware hashes). The results become a 0–100 Security Score. A check that can't run is shown as not checked, never as passed.

Can CoreLock replace my antivirus?

+
No. CoreLock is built to run alongside the security software already on your Mac, not to replace it. It doesn't scan your whole disk or block threats in real time. It checks running apps, open network services, permissions, login items, AI agents and your Downloads folder, then explains what it finds in plain English.

What does the AI actually do?

+
It explains. The scan and the Security Score are worked out on your Mac. If you turn on AI explanations (off by default) and sign in, a cloud model reviews the scans you start and explains the results in plain English, and you can ask it questions in Ask CoreLock. It doesn't set your score or add findings.

Is the free tier enough?

+
For most people, yes. Free includes unlimited six-check scans, the AI agent snapshot, the privacy permissions list, Shields and 3 AI scan reviews a day once you sign in and turn them on. Pro adds deep file scans of more folders, AI scan reviews without the daily limit and optional sync.

Is CoreLock notarized by Apple?

+
Yes — the app is signed with an Apple Developer ID and notarized. It opens normally on macOS without the right-click-open workaround older versions needed.

See what's actually there.

Download CoreLock. Run one scan, and you'll know more about your computer than most of its owners ever will.

MACOS 13+ · SIGNED & NOTARIZED

Not ready to install? Get your free Mac Security Score →