CoreLock is a Mac security app for journalists. Protect Your Sources. Protect Your Work.. Source confidentiality is non-negotiable. CoreLock shows which apps hold camera and microphone permissions, flags known-bad tools among running apps, and shows you what is running.
Built for Journalists
Source confidentiality is non-negotiable. CoreLock shows which apps hold camera and microphone permissions, flags known-bad tools among running apps, and shows you what is running.
Download CoreLock FreeFree tier included — no credit card required
These are the risks journalists face every day.
State-sponsored spyware is real. CoreLock flags known-bad tools and risky command lines among running apps, but targeted state-level attacks can go beyond what a consumer scanner detects.
A compromised device means compromised sources. CoreLock's privacy audit shows which apps hold camera, microphone and file permissions.
Reporting from unstable regions means untrusted networks and physical device risk. CoreLock lists your apps' open connections on any network, and Shields can turn on the macOS firewall and Stealth mode.
Tips come as documents, images, and archives from people you cannot vet. CoreLock checks files in your Downloads folder against a built-in list of known-malware hashes and its own malware-signature (YARA) rules.
CoreLock is not a generic antivirus. These are the capabilities that make a real difference for your work.
CoreLock flags known-bad tools and risky command lines, like reverse shells, among running apps. It cannot guarantee detection of targeted spyware.
Scanning runs on your Mac. AI explanations are off by default. If you turn them on, a summary is sent to our servers: your 25 busiest programs (name, ID, CPU and memory), connection counts and disk totals. Never your files. File reputation checks are also off by default. If you turn them on, fingerprints (hashes, not contents) of scanned files are checked against an online malware-hash database.
See your apps' open connections by IP address and port, so you can review any process talking to an address you do not recognize. It doesn't show hostnames or processes owned by root.
Checks files in Downloads (and, with Files › Quick scan, Desktop and LaunchAgents) against a built-in list of known-malware hashes and CoreLock's malware-signature (YARA) rules. A signature match is a reason to look at the file, not proof it's harmful.
See which apps have camera, microphone, and files and folders access, and open Privacy & Security in System Settings to turn off anything that should not be there.
Pro ($9.99/mo) removes the AI analysis limit. The free tier (unlimited scans, 3 AI analyses per day) lets you try it first.
View All PlansOpenClaw, Claude Code, and local AI agents have full system access — Terminal, files, network, and more. CoreLock recognizes supported AI agents and shows the files, connections and child processes they have open.
Your Mac holds wallet keys, seed phrases, and exchange sessions. Infostealers are designed to harvest it quickly. CoreLock checks for some of the footholds they rely on, like unsigned apps and unusual launch agents.
You run untrusted code, manage SSH keys, and juggle dozens of packages. CoreLock checks running apps, open ports and login items every 15 minutes by default.
Your Mac is your business. Client files, invoices, contracts — one breach and your reputation is on the line. CoreLock checks it every 15 minutes by default and explains what it finds in plain English.
Your Mac holds your thesis, projects, and personal data. CoreLock helps you see what is running on it — and it starts free.
Kids download apps, click links, and grant permissions without thinking twice. CoreLock checks the Mac every 15 minutes by default and tells you what matters.
No tool can guarantee that, and CoreLock does not claim to detect Pegasus. It flags known-bad tools and risky command lines among running apps, but targeted state-level attacks can go beyond what a consumer scanner detects.
Scanning runs on your Mac. AI explanations are off by default. If you turn them on, a summary is sent to our servers: your 25 busiest programs (name, ID, CPU and memory), connection counts and disk totals. Never your files. File reputation checks are also off by default. If you turn them on, fingerprints (hashes, not contents) of scanned files are checked against an online malware-hash database. See the Privacy page for details.
CoreLock checks files locally against a built-in list of known-malware hashes and its own malware-signature (YARA) rules. File contents are never uploaded. If you turn on file reputation checks (off by default), fingerprints (hashes, not contents) are checked against an online malware-hash database.
Core scanning runs on your Mac. Signing in, AI analysis, AI chat, and license checks need an internet connection.
Download CoreLock and run a free scan on your Mac. Free to start, no credit card required.
Apple silicon build 2.0.7 · Intel Mac?
For your Mac, not this phone ·
Count which apps can record your screen, use your mic or camera, or read your files, and get a free 0–100 estimate in your browser.
Estimate your Security ScoreFree · Calculated in your browser