CoreLock is a Mac security app for developers. Security Built for Developers. You run untrusted code, manage SSH keys, and juggle dozens of packages. CoreLock checks running apps, open ports and login items every 15 minutes by default.
Built for Developers
You run untrusted code, manage SSH keys, and juggle dozens of packages. CoreLock checks running apps, open ports and login items every 15 minutes by default.
Download CoreLock FreeFree tier included — no credit card required
These are the risks developers face every day.
Every install is a gamble. Supply-chain attacks hide in dependencies you never audited. CoreLock's scan flags risky command lines, such as download-and-run scripts, among running processes. Its Network screen lists open connections, so you can look for anything odd after an install.
Your laptop holds the keys to production. One compromised app and your credentials are exfiltrated. CoreLock lists the busiest processes and your apps' open connections by IP address and port, so you can see what is talking to the outside.
IDEs, Docker, terminal emulators — they all want camera, mic, and full disk access. With Full Disk Access, CoreLock lists which apps hold camera, microphone, files and folders, Full Disk Access, Screen Recording, Accessibility and Input Monitoring permissions.
Cloning repos and building locally is part of the job. CoreLock's scan flags risky command lines among running processes, such as reverse shells and download-and-run scripts. It doesn't check the binaries you build.
CoreLock is not a generic antivirus. These are the capabilities that make a real difference for your work.
Every scan checks the 100 busiest processes for known-bad tools and risky command lines, like reverse shells, download-and-run scripts and encoded commands.
With Full Disk Access, see which apps hold camera, microphone, files and folders, Screen Recording, Accessibility, Full Disk Access and Input Monitoring permissions, including Electron apps.
On demand, the Apps screen checks the signature and notarization of apps in /Applications and ~/Applications (not in subfolders). It flags unsigned apps and broken or expired signatures.
See your apps' open connections by IP address and port, and the services that accept connections from other devices. No hostnames, and processes owned by root aren't shown.
Some findings offer Quit or Quarantine, after you confirm. Most open the right page of System Settings or Finder, so you make the change without touching the terminal.
The free tier (unlimited scans, 3 AI analyses per day) is a solid way to start. Pro ($9.99/mo) removes the AI analysis limit.
View All PlansYour Mac is your business. Client files, invoices, contracts — one breach and your reputation is on the line. CoreLock checks it every 15 minutes by default and explains what it finds in plain English.
Your Mac holds your thesis, projects, and personal data. CoreLock helps you see what is running on it — and it starts free.
Kids download apps, click links, and grant permissions without thinking twice. CoreLock checks the Mac every 15 minutes by default and tells you what matters.
You cannot afford a full IT team, but you cannot afford a breach either. CoreLock gives small businesses a plain-English view of what is running on their Macs.
Working from home means your personal Mac is your office Mac. CoreLock helps you see what is running on the Mac that holds your work.
Your Mac is your studio. Videos, designs, music — years of work in one place. CoreLock checks the Mac that holds it and explains what it finds in plain English.
CoreLock does not hook into your build toolchain; it reads process and network information when it scans. We have not benchmarked its effect on build times.
Not directly. CoreLock does not inspect package contents. Its scan flags risky command lines among running processes, such as download-and-run scripts, and its Network screen lists open connections, so you may spot something odd after an install. It cannot guarantee it will catch a supply-chain attack.
CoreLock checks your host macOS system. It lists the open connections of Docker and VM processes, and flags ports they listen on beyond this Mac. It does not scan inside containers or VMs.
Scanning runs on your Mac. AI explanations are off by default. If you turn them on, a summary is sent to our servers: your 25 busiest programs (name, ID, CPU and memory), connection counts and disk totals. Never your files. File reputation checks are also off by default. If you turn them on, fingerprints (hashes, not contents) of scanned files are checked against an online malware-hash database. The local checks need no account.
Download CoreLock and run a free scan on your Mac. Free to start, no credit card required.
Apple silicon build 2.0.7 · Intel Mac?
For your Mac, not this phone ·
Count which apps can record your screen, use your mic or camera, or read your files, and get a free 0–100 estimate in your browser.
Estimate your Security ScoreFree · Calculated in your browser