softwareupdated (Software Update Daemon) is a safe macOS system process. softwareupdated is the macOS background daemon responsible for checking, downloading, and preparing system software updates. It periodically contacts Apple's update servers to determine if new macOS updates, security patches, or XProtect signature updates are available. When updates are found, it can download them in the background and notify you that an update is ready to install. softwareupdated running briefly while checking for updates is completely normal — it contacts Apple's servers periodically. Be concerned if it uses high CPU or network bandwidth continuously for more than 2 hours, which may indicate a stuck download or a corrupted update cache. Also be wary if softwareupdated is attempting to connect to non-Apple servers, which should never happen with the legitimate process.
Software Update Daemon
softwareupdated is the macOS background daemon responsible for checking, downloading, and preparing system software updates. It periodically contacts Apple's update servers to determine if new macOS updates, security patches, or XProtect signature updates are available. When updates are found, it can download them in the background and notify you that an update is ready to install.
High CPU usage while checking for or downloading large macOS updates in the background
Significant network bandwidth consumption during background update downloads
Disk space issues when softwareupdated downloads a large update without sufficient free space
Process running persistently after a failed or interrupted update download
Run 'softwareupdate -l' in Terminal to list all available updates. This shows what softwareupdated has found and is trying to download. If a large update is pending, the background download activity is expected and will resolve once the download completes.
Go to System Settings > General > Software Update > Automatic Updates. Here you can control whether updates are downloaded automatically. Disabling 'Download new updates when available' will prevent softwareupdated from using bandwidth in the background, but you will need to manually check for updates.
Run 'sudo rm -rf /Library/Updates/*' in Terminal to clear downloaded update files that may be corrupted or stuck. Then run 'sudo softwareupdate -l' to force a fresh check. This resolves issues where softwareupdated is stuck retrying a failed download.
Run 'sudo killall softwareupdated' in Terminal. launchd will restart it when the next update check is scheduled. This clears any stuck state from a failed update attempt and resets the daemon's connection to Apple's update servers.
softwareupdated running briefly while checking for updates is completely normal — it contacts Apple's servers periodically. Be concerned if it uses high CPU or network bandwidth continuously for more than 2 hours, which may indicate a stuck download or a corrupted update cache. Also be wary if softwareupdated is attempting to connect to non-Apple servers, which should never happen with the legitimate process.
CoreLock monitors softwareupdated activity to ensure it is communicating only with legitimate Apple update servers. It can detect if the update process has been compromised or if a malicious process is masquerading as the software update daemon. CoreLock also tracks whether your system is falling behind on security updates and alerts you to critical patches.
Download CoreLock Freelaunchd is the first process that runs when macOS boots (PID 1) and serves as the system's init and service management f...
XProtect is Apple's built-in antimalware system on macOS that automatically scans downloaded files and applications for ...
nsurlsessiond is the macOS background daemon that handles URL-based download and upload tasks on behalf of applications....
No. softwareupdated is Apple's official software update daemon built into macOS. It is responsible for keeping your system up to date with the latest security patches and macOS versions. It is code-signed by Apple and protected by System Integrity Protection. Seeing it in Activity Monitor is normal, especially when it is checking for or downloading updates.
softwareupdated downloads macOS updates in the background when automatic updates are enabled. Major macOS updates can be several gigabytes in size, which may noticeably consume bandwidth. You can check what is downloading with 'softwareupdate -l' in Terminal. To prevent background downloads, disable 'Download new updates when available' in System Settings > General > Software Update > Automatic Updates.
While you can temporarily stop it with 'sudo killall softwareupdated,' it will restart on its next scheduled check. You can reduce its activity by disabling automatic updates in System Settings, but it is not recommended to completely prevent update checks, as security patches are critical for protecting your Mac. Security-only updates (like XProtect signatures) are particularly important to receive promptly.
High CPU from softwareupdated usually occurs when it is actively downloading, verifying, or preparing an update for installation. Large updates require cryptographic verification of every component, which is CPU-intensive. This is temporary and should resolve within 1-2 hours. If it persists longer, clear the update cache with 'sudo rm -rf /Library/Updates/*' and try again.
Download CoreLock to identify suspicious processes, detect threats, and keep your Mac running smoothly.
Download CoreLock FreeAvailable for macOS and Windows