What's new in CoreLock. Every feature, improvement, and fix in one place.
v2.0.7October 2026
New
Right-click a row for its actions, like Ignore, Show in Finder or Copy. Text fields get Copy and Paste
Back and forward between screens with ⌘[ and ⌘], a trackpad swipe or your mouse's side buttons
What's New: after an update, CoreLock shows what changed, once
Improved
Shields is now one list of switches, each with a single line about what it does
Ask CoreLock: the box grows as you type, and Shift-Return starts a new line
Items that start when you log in show readable names, like "Local CI" instead of a long code name. A name that borrows Apple's spelling keeps its raw label
Fixed
Sheets opened from a screen (Stop, Temperature options, Ignore) sit over the whole window again
Quit from the right-click menu in Processes is offered only for a single process
v2.0.6October 2026
Improved
Lighter: CoreLock writes far less to your disk, and clicking around no longer stalls while it saves
Updates install by themselves (from 2.0.6 on): at a quiet moment, when no CoreLock window is open, no scan or fix is running, and your Mac has been idle for 10 minutes, is locked or is going to sleep. CoreLock comes straight back to the menu bar. If no quiet moment comes within a day, a notification reminds you, at most once a day. Restart to Update still installs right away
New
Processes shows what's using your Mac: CPU and memory, and GPU where your Mac reports it, measured over a stated time
Dev servers you run show up in Processes, named by project and port; you can stop one after confirming
Temperature (Apple silicon): your Mac's temperatures, and its fans if it has them. The CPU temperature can show in the menu bar from Settings › General; it's off unless you turn it on
Privacy, Files and Apps rebuilt to match the rest of CoreLock, in plain English with less clutter
Fixed
Quit is offered for a single process only, and stops only that one after checking it's still the process you saw
A firewall that's off is now worth a look rather than needing action, and only when an app on your Mac accepts connections from other devices
Full Disk Access is detected on macOS 27, and rechecked when you come back from System Settings
v2.0.5October 2026
New
Move to Applications: if CoreLock runs from somewhere it can't update itself, like your Downloads folder or the installer disk image, it offers to move itself into Applications. If an update can't install, CoreLock now says so instead of staying on the old version without a word
Ask CoreLock usage: Account shows how many of today's questions you've used
Invite anyone to your team: Business owners can invite people who don't have a CoreLock account yet. They see the invitation in CoreLock after they sign up with that email
Leave a team: Business team members can leave from Account
Fixed
Your Macs in Account: they now appear (2.0.4 listed none), and you can remove one yourself. Removing a Mac signs CoreLock out on it and frees its place
Mac limit: your plan's limit (1 Mac on Free, 5 on Pro and Lifetime, 2 per seat on Business) now applies when you sign in on another Mac. Macs that are already signed in stay signed in; at the limit, remove one in Account first
v2.0.4October 2026
New
A new icon: CoreLock now uses the C_ from corelock.net, in the Dock, in Finder and in the installer
Account in the main window: at the bottom of the sidebar, with your plan, what it includes, your Macs and your team for Business; Settings is one click away there too
v2.0.3October 2026
New
Business team setup: owners create a team and invite Macs by email from Settings › Account. Invitees need a CoreLock account with that email and see the invitation in CoreLock
Team members get everything in Pro, shown as Business. Owners see who is on the team and how many seats are used, and can remove a member or withdraw an invite
v2.0.2October 2026
Fixed
Malware-signature (YARA) check: it now runs. In 2.0.0 and 2.0.1 it silently didn't. Its rules were cleaned up to keep only specific ones. A match says "worth a look" and shows what matched, and CoreLock never quarantines a file on its own. If the check can't run, the scan says so
Background CPU: much lower. The camera and microphone check now reads the in-use state macOS itself keeps, and background work whose results CoreLock never showed you is switched off
Privacy screen: with Full Disk Access, it now lists Screen Recording, Accessibility, Full Disk Access and Input Monitoring. The Revoke and Review buttons now open the right part of System Settings
Apps and Processes screens: labels fixed. Unsigned apps are no longer called known bad software, and processes are no longer all labeled Trusted
v2.0.1October 2026
Improved
CoreLock no longer test-runs files from your Downloads folder. 2.0.0 could run a download it was unsure about in a sandbox to watch what it did; that is now off on every Mac
Fixed
Intel Macs: the on-device file classifier now starts (in 2.0.0 the Intel app was missing a file it needs)
v2.0.0October 2026
New
A new window: Overview with the Security Score and what it could check, Issues with a plain-English next step for each finding, Shields, and Ask CoreLock
AI-agent snapshot: see what supported running AI agents have open — files, network connections and child processes
Open doors: services listening beyond this Mac's loopback address, such as a local model server bound to 0.0.0.0
Shields: the macOS firewall, Stealth mode, Public Wi-Fi mode (macOS 26+) and Pause, in one place and in the menu bar
Menu bar panel with the latest score, coverage and the Shields controls
Privacy controls that decide which optional features send data off the Mac
Improved
Updates download in the background and install with Restart to Update
Clean-up after a scan is now opt-in
v1.1.1May 2026
New
Simple/Advanced UI toggle — switch between a streamlined simple view and the full advanced dashboard
Improved
Monitor polling reduced ~4.5x to eliminate app lag — background process checks cut from ~88/min to ~20/min
Monitors now start staggered over the first minute to avoid a resource spike at launch
Fixed
IP Shield proxy cleanup — the macOS system proxy is now always reset when the app quits, so your network never gets stuck pointing at a closed local port
In-app restart now properly relaunches the app instead of quitting
v0.9.0March 2026
New
AI Agent Prompt Injection Protection — scans .cursorrules, CLAUDE.md, .clawdbot, and 14 other AI config files for malicious instructions
Credential Exfiltration Detection — catches curl/wget commands stealing SSH keys, .env files, AWS credentials, and more
Exfiltration Webhook Blocking — flags webhook.site, ngrok, requestbin, and other known data exfil services
Hidden Unicode Detection — finds zero-width character sequences used to hide instructions in AI config files
Temporal Attack Chain Correlation — credential read followed by network send triggers critical alert within 60s window
AI Config → Credential Access correlation — detects when an agent reads a config file then accesses secrets within 120s