Mac security that costs less than your morning coffee.

The six-check scan runs on your Mac and needs no account. Nothing about your Mac is sent unless you turn on a feature that needs it, and those are off by default. AI explanations (signed in) send a summary of the scans you start: system stats, the 25 busiest program names with process ID, CPU and memory, connection counts and disk totals. Never your files. File reputation checks send the SHA-256 fingerprints of scanned files to an online malware-hash database, never their contents. On Pro and Business, if you turn on sync, CoreLock uploads your scan scores and issue counts, fix history and two settings. See the privacy policy for the full list.

Scan results stay on your Mac. AI explanations and file reputation checks are off by default (Settings › Privacy). With AI explanations on, each scan you start sends system stats, the 25 busiest program names with process ID, CPU and memory, connection counts and disk totals. With file reputation checks on, only the SHA-256 fingerprints of scanned files are checked online. On Pro and Business, sync is off until you turn it on; then it uploads scan scores and issue counts, fix history and two settings. Never your files.

CoreLock does not collect your files, browsing history, keystrokes or screen content. The scan runs on your Mac. If you turn on AI explanations (off by default), a summary is sent to our servers for each scan you start: system stats, the 25 busiest program names with process ID, CPU and memory, connection counts and disk totals. Never your files. If you turn on file reputation checks (off by default), the SHA-256 fingerprints of scanned files are checked against an online malware-hash database. CoreLock is signed and notarized by Apple; notarization is an automated check for known malware at submission, not a guarantee of safety.

Fair question. CoreLock is signed and notarized by Apple (an automated check for known malware, not a guarantee of safety), the privacy policy says exactly what is sent, and paid plans come with a 30-day money-back guarantee. You can try the free tier before spending a penny.

Yes. macOS has built-in protections, but they don't catch everything. Macs can still get adware, potentially unwanted programs, and privacy-invasive apps. CoreLock shows things macOS doesn't put in one place, like sensitive permissions left behind by apps you removed, unsigned login items, and AI agents' open files and connections.

Six checks: running apps, network, app permissions, login and background items, AI agents, and your Downloads folder. Files in Downloads are checked against a built-in list of known-malware hashes and CoreLock's malware-signature (YARA) rules. The results become a 0–100 Security Score and an Issues list, explained in plain English. A check that can't run is shown as not checked.

It explains. AI explanations are off by default; when you turn them on and sign in, a cloud model reviews the scans you start (system stats, the 25 busiest program names, connection counts and disk totals) and explains the results in plain English. It does not set your Security Score and does not add Issues; the score is computed on your Mac. Free includes 3 AI scan reviews a day; Pro has no daily limit.

Scans use some CPU while they run, every 15 minutes by default. Between scans CoreLock watches its decoy files and whether the camera or microphone is in use, and every few minutes takes a quick look at what's running to learn what's normal for your Mac. You can see CoreLock's CPU use in Activity Monitor, and Pause in Shields stops background monitoring for an hour. If it slows your Mac down, tell us at info@corelock.net.

There is no Undo button. A quarantined file goes to a hidden quarantine folder, and you can move it back by hand. Shields settings such as the firewall can be switched back off in the app. Files removed by clean-up and stopped processes can't be brought back. Quit and Quarantine ask you to confirm first, and clean-up after a scan is off by default.

CoreLock works on macOS (Apple Silicon and Intel), from macOS 13 Ventura onward. It is macOS only.

No. The six-check scan works without an account. Sign in with a free account to use AI scan reviews and Ask CoreLock, or to turn on a paid plan. You don't need a credit card.

CoreLock adds it to the Issues list as Needs action or Worth a look, and explains it in plain English. Some findings offer Quit or Quarantine, after you confirm. Most open the right page of System Settings or Finder so you make the change yourself. Nothing is fixed automatically by default.

Yes, cancel anytime from the app or your Stripe billing portal. No questions asked, no cancellation fees. You also get a full 30-day money-back guarantee — if CoreLock isn't for you, we'll refund every penny. Your free tier access continues after cancellation.

The free six-check scan works on any number of Macs, with no account. Signing in counts that Mac against your plan: 1 Mac on Free, up to 5 on Pro and Lifetime, and 2 per seat on Business. From CoreLock 2.0.5 the limit applies when you sign in on another Mac, and Macs that are already signed in stay signed in. Account, at the bottom of CoreLock's sidebar, lists your Macs and lets you remove one, which signs CoreLock out on it and frees its place. At the limit, remove one there first.

One payment of $200 gives you Pro on up to 5 Macs, with every future version of CoreLock for macOS, including major upgrades. AI scan reviews and Ask CoreLock have the same limits as Pro, and you can turn on sync of your scan scores, issue counts and fix history to your account. The 30-day money-back guarantee applies. The license is for one person and cannot be transferred.

If you pay for Pro monthly or yearly and a Lifetime is added to your account, whether you buy it or restore it, your account is on the Lifetime and we cancel the subscription right away. We refund the unused part of the period you paid for, to the card that paid it. Paid with a different email than your CoreLock account? Use Restore Purchase to add the Lifetime first. Nothing is refunded if you paid nothing for that period (a $0 or complimentary plan, a trial, or an unpaid period) or if the amount comes to under 50 cents; the subscription is still cancelled. A Business subscription is never cancelled: Business stays, and the Lifetime is your fallback if Business ends. If the Lifetime is later refunded or reversed (for example under the 30-day money-back guarantee), the cancelled subscription is not restarted. A subscription that CoreLock cannot match to your account is not cancelled automatically; cancel it in the CoreLock app (Account, Manage Subscription).