G20Guides This Mac

Check your Mac's protections

See in one place whether the built-in protections of macOS are switched on, and what starts with your Mac.

Time: 2 minutes
Steps: 5

What you need

l/Activity open.

Start at step 1

Keep Awakeuntil 11:42Staying awake

CPU24%

RAM21.4GiB

PWR14.2W

Steps

Step 1. Open Mac Care
Press ⇧⌘K. Mac Care reads your settings once when you open it. The stage counts how many of the four protections are on.
l/Activity
A clearer view of your Mac
MonitorOn
Overview
Processes486
CPU24%
GPU18%
Neural Engine0.4 W
Memory21.4 GB
Disk3.2 MB/s
Network1.8 MB/s
Hardware14.2 W
Investigate
History
Sessions
Diagnostics
Files & Apps
Storage
Locate
Duplicates
Apps
This Mac
Mac Care
App Volume
Keep Awake
Menu Bar
Apple M4 Pro14 CPU cores · 48 GB unified memory
Settings⌘,
Mac CareRead this Mac’s protection settings, startup items, and local snapshots.
Search or jump to…⌘K
Checked10:36
3of 4protections enabled
1 disabled · 0 unknown
Protection settings
GatekeeperEnabled
FileVaultEnabled
Application firewallDisabled
System Integrity ProtectionEnabled
Installed metadata
XProtect metadataInstalled
Startup items14
Local snapshots2
Protection settingsConfiguration readings only. This is not a malware scan.Check Again
Gatekeeperassessments enabled
EnabledOpen Settings
FileVaultFileVault is On.
EnabledOpen Settings
Application firewallFirewall is disabled. (State = 0)
DisabledOpen Settings
System Integrity ProtectionSystem Integrity Protection status: enabled.
EnabledOpen Settings
Installed metadata
XProtect metadataXProtect.app: 164 · XProtect.bundle: 5342. Presence does not establish freshness or a malware-free Mac.
Installed
Startup itemsLaunch agents and daemons defined on disk. A definition does not prove a job is loaded or running.Login Items…Processes
com.harbor.vmnetd/Library/PrivilegedHelperTools/com.harbor.vmnetd
Daemon
com.kitebrowser.update.agent/Library/Application Support/Kite Browser/Update/KiteUpdateAgent
Shared agent
com.northwind.sync.agent/Applications/Northwind Sync.app/Contents/MacOS/NorthwindSyncAgent
User agent
com.northwind.sync.helper/Library/PrivilegedHelperTools/com.northwind.sync.helper
Daemon
com.pixelroom.thumbnails/Applications/Pixelroom.app/Contents/Helpers/ThumbnailAgent
User agent
com.quillnotes.reminders/Applications/Quill Notes.app/Contents/Library/LoginItems/QuillReminders.app/Contents/MacOS/QuillReminders
User agent
com.roundtable.audio.driver/Library/Audio/Plug-Ins/HAL/RoundtableAudio.driver/Contents/MacOS/RoundtableAudioDaemon
Daemon
com.roundtable.launcher/Applications/Roundtable.app/Contents/Helpers/RoundtableLauncher
User agent
com.tempoplayer.mediakeys/Applications/Tempo Player.app/Contents/Helpers/MediaKeysAgent
User agent
com.tesseldesign.fontsync/Library/Application Support/Tessel Design/FontSync/fontsyncd
Shared agent
io.forgeide.indexer/Users/sam/Library/Application Support/Forge IDE/bin/forge-indexer
User agent
io.forgeide.remote.tunnelProgram not named in the definition
User agent
org.atlasmaps.offline/Applications/Atlas Maps.app/Contents/Helpers/OfflineTiles
User agent
org.lumenedit.render.queue/Library/PrivilegedHelperTools/org.lumenedit.render.queue
Daemon
Live · every 2sMac Care reads local settings and changes nothingActivity
Step 01
02Step 2 of 5
Step 2. Read the four rows
- Gatekeeper stops apps from unknown sources opening without a warning.
- FileVault encrypts your disk.
- Application firewall filters incoming connections.
- System Integrity Protection guards the system files.
Each row shows what macOS itself reports, and a chip: Enabled, Disabled or Unknown. A reading that could not be made stays Unknown.
l/Activity
A clearer view of your Mac
MonitorOn
Overview
Processes486
CPU24%
GPU18%
Neural Engine0.4 W
Memory21.4 GB
Disk3.2 MB/s
Network1.8 MB/s
Hardware14.2 W
Investigate
History
Sessions
Diagnostics
Files & Apps
Storage
Locate
Duplicates
Apps
This Mac
Mac Care
App Volume
Keep Awake
Menu Bar
Apple M4 Pro14 CPU cores · 48 GB unified memory
Settings⌘,
Mac CareRead this Mac’s protection settings, startup items, and local snapshots.
Search or jump to…⌘K
Checked10:36
3of 4protections enabled
1 disabled · 0 unknown
Protection settings
GatekeeperEnabled
FileVaultEnabled
Application firewallDisabled
System Integrity ProtectionEnabled
Installed metadata
XProtect metadataInstalled
Startup items14
Local snapshots2
Protection settingsConfiguration readings only. This is not a malware scan.Check Again
Gatekeeperassessments enabled
EnabledOpen Settings
FileVaultFileVault is On.
EnabledOpen Settings
Application firewallFirewall is disabled. (State = 0)
DisabledOpen Settings
System Integrity ProtectionSystem Integrity Protection status: enabled.
EnabledOpen Settings
Installed metadata
XProtect metadataXProtect.app: 164 · XProtect.bundle: 5342. Presence does not establish freshness or a malware-free Mac.
Installed
Startup itemsLaunch agents and daemons defined on disk. A definition does not prove a job is loaded or running.Login Items…Processes
com.harbor.vmnetd/Library/PrivilegedHelperTools/com.harbor.vmnetd
Daemon
com.kitebrowser.update.agent/Library/Application Support/Kite Browser/Update/KiteUpdateAgent
Shared agent
com.northwind.sync.agent/Applications/Northwind Sync.app/Contents/MacOS/NorthwindSyncAgent
User agent
com.northwind.sync.helper/Library/PrivilegedHelperTools/com.northwind.sync.helper
Daemon
com.pixelroom.thumbnails/Applications/Pixelroom.app/Contents/Helpers/ThumbnailAgent
User agent
com.quillnotes.reminders/Applications/Quill Notes.app/Contents/Library/LoginItems/QuillReminders.app/Contents/MacOS/QuillReminders
User agent
com.roundtable.audio.driver/Library/Audio/Plug-Ins/HAL/RoundtableAudio.driver/Contents/MacOS/RoundtableAudioDaemon
Daemon
com.roundtable.launcher/Applications/Roundtable.app/Contents/Helpers/RoundtableLauncher
User agent
com.tempoplayer.mediakeys/Applications/Tempo Player.app/Contents/Helpers/MediaKeysAgent
User agent
com.tesseldesign.fontsync/Library/Application Support/Tessel Design/FontSync/fontsyncd
Shared agent
io.forgeide.indexer/Users/sam/Library/Application Support/Forge IDE/bin/forge-indexer
User agent
io.forgeide.remote.tunnelProgram not named in the definition
User agent
org.atlasmaps.offline/Applications/Atlas Maps.app/Contents/Helpers/OfflineTiles
User agent
org.lumenedit.render.queue/Library/PrivilegedHelperTools/org.lumenedit.render.queue
Daemon
Live · every 2sMac Care reads local settings and changes nothingActivity
Step 02
Step 3. Fix what is off, in System Settings
Mac Care changes nothing. Click Open Settings on a row and macOS opens on the right page. Make the change there.
l/Activity
A clearer view of your Mac
MonitorOn
Overview
Processes486
CPU24%
GPU18%
Neural Engine0.4 W
Memory21.4 GB
Disk3.2 MB/s
Network1.8 MB/s
Hardware14.2 W
Investigate
History
Sessions
Diagnostics
Files & Apps
Storage
Locate
Duplicates
Apps
This Mac
Mac Care
App Volume
Keep Awake
Menu Bar
Apple M4 Pro14 CPU cores · 48 GB unified memory
Settings⌘,
Mac CareRead this Mac’s protection settings, startup items, and local snapshots.
Search or jump to…⌘K
Checked10:36
3of 4protections enabled
1 disabled · 0 unknown
Protection settings
GatekeeperEnabled
FileVaultEnabled
Application firewallDisabled
System Integrity ProtectionEnabled
Installed metadata
XProtect metadataInstalled
Startup items14
Local snapshots2
Protection settingsConfiguration readings only. This is not a malware scan.Check Again
Gatekeeperassessments enabled
EnabledOpen Settings
FileVaultFileVault is On.
EnabledOpen Settings
Application firewallFirewall is disabled. (State = 0)
DisabledOpen Settings
System Integrity ProtectionSystem Integrity Protection status: enabled.
EnabledOpen Settings
Installed metadata
XProtect metadataXProtect.app: 164 · XProtect.bundle: 5342. Presence does not establish freshness or a malware-free Mac.
Installed
Startup itemsLaunch agents and daemons defined on disk. A definition does not prove a job is loaded or running.Login Items…Processes
com.harbor.vmnetd/Library/PrivilegedHelperTools/com.harbor.vmnetd
Daemon
com.kitebrowser.update.agent/Library/Application Support/Kite Browser/Update/KiteUpdateAgent
Shared agent
com.northwind.sync.agent/Applications/Northwind Sync.app/Contents/MacOS/NorthwindSyncAgent
User agent
com.northwind.sync.helper/Library/PrivilegedHelperTools/com.northwind.sync.helper
Daemon
com.pixelroom.thumbnails/Applications/Pixelroom.app/Contents/Helpers/ThumbnailAgent
User agent
com.quillnotes.reminders/Applications/Quill Notes.app/Contents/Library/LoginItems/QuillReminders.app/Contents/MacOS/QuillReminders
User agent
com.roundtable.audio.driver/Library/Audio/Plug-Ins/HAL/RoundtableAudio.driver/Contents/MacOS/RoundtableAudioDaemon
Daemon
com.roundtable.launcher/Applications/Roundtable.app/Contents/Helpers/RoundtableLauncher
User agent
com.tempoplayer.mediakeys/Applications/Tempo Player.app/Contents/Helpers/MediaKeysAgent
User agent
com.tesseldesign.fontsync/Library/Application Support/Tessel Design/FontSync/fontsyncd
Shared agent
io.forgeide.indexer/Users/sam/Library/Application Support/Forge IDE/bin/forge-indexer
User agent
io.forgeide.remote.tunnelProgram not named in the definition
User agent
org.atlasmaps.offline/Applications/Atlas Maps.app/Contents/Helpers/OfflineTiles
User agent
org.lumenedit.render.queue/Library/PrivilegedHelperTools/org.lumenedit.render.queue
Daemon
Live · every 2sMac Care reads local settings and changes nothingActivity
Step 03
Step 4. Check again
Back in l/Activity, click Check Again or press ⌘R. The chip and the count update.
l/Activity
A clearer view of your Mac
MonitorOn
Overview
Processes486
CPU24%
GPU18%
Neural Engine0.4 W
Memory21.4 GB
Disk3.2 MB/s
Network1.8 MB/s
Hardware14.2 W
Investigate
History
Sessions
Diagnostics
Files & Apps
Storage
Locate
Duplicates
Apps
This Mac
Mac Care
App Volume
Keep Awake
Menu Bar
Apple M4 Pro14 CPU cores · 48 GB unified memory
Settings⌘,
Mac CareRead this Mac’s protection settings, startup items, and local snapshots.
Search or jump to…⌘K
Checked10:36
3of 4protections enabled
1 disabled · 0 unknown
Protection settings
GatekeeperEnabled
FileVaultEnabled
Application firewallDisabled
System Integrity ProtectionEnabled
Installed metadata
XProtect metadataInstalled
Startup items14
Local snapshots2
Protection settingsConfiguration readings only. This is not a malware scan.Check Again
Gatekeeperassessments enabled
EnabledOpen Settings
FileVaultFileVault is On.
EnabledOpen Settings
Application firewallFirewall is disabled. (State = 0)
DisabledOpen Settings
System Integrity ProtectionSystem Integrity Protection status: enabled.
EnabledOpen Settings
Installed metadata
XProtect metadataXProtect.app: 164 · XProtect.bundle: 5342. Presence does not establish freshness or a malware-free Mac.
Installed
Startup itemsLaunch agents and daemons defined on disk. A definition does not prove a job is loaded or running.Login Items…Processes
com.harbor.vmnetd/Library/PrivilegedHelperTools/com.harbor.vmnetd
Daemon
com.kitebrowser.update.agent/Library/Application Support/Kite Browser/Update/KiteUpdateAgent
Shared agent
com.northwind.sync.agent/Applications/Northwind Sync.app/Contents/MacOS/NorthwindSyncAgent
User agent
com.northwind.sync.helper/Library/PrivilegedHelperTools/com.northwind.sync.helper
Daemon
com.pixelroom.thumbnails/Applications/Pixelroom.app/Contents/Helpers/ThumbnailAgent
User agent
com.quillnotes.reminders/Applications/Quill Notes.app/Contents/Library/LoginItems/QuillReminders.app/Contents/MacOS/QuillReminders
User agent
com.roundtable.audio.driver/Library/Audio/Plug-Ins/HAL/RoundtableAudio.driver/Contents/MacOS/RoundtableAudioDaemon
Daemon
com.roundtable.launcher/Applications/Roundtable.app/Contents/Helpers/RoundtableLauncher
User agent
com.tempoplayer.mediakeys/Applications/Tempo Player.app/Contents/Helpers/MediaKeysAgent
User agent
com.tesseldesign.fontsync/Library/Application Support/Tessel Design/FontSync/fontsyncd
Shared agent
io.forgeide.indexer/Users/sam/Library/Application Support/Forge IDE/bin/forge-indexer
User agent
io.forgeide.remote.tunnelProgram not named in the definition
User agent
org.atlasmaps.offline/Applications/Atlas Maps.app/Contents/Helpers/OfflineTiles
User agent
org.lumenedit.render.queue/Library/PrivilegedHelperTools/org.lumenedit.render.queue
Daemon
Live · every 2sMac Care reads local settings and changes nothingActivity
Step 04
Step 5. See what starts with your Mac
Scroll to Startup items. These are the background agents and daemons that apps have registered. Each shows its label, the program it would run and whether it is yours or shared. Login Items… opens the place in System Settings where you switch them off.
l/Activity
A clearer view of your Mac
MonitorOn
Overview
Processes486
CPU24%
GPU18%
Neural Engine0.4 W
Memory21.4 GB
Disk3.2 MB/s
Network1.8 MB/s
Hardware14.2 W
Investigate
History
Sessions
Diagnostics
Files & Apps
Storage
Locate
Duplicates
Apps
This Mac
Mac Care
App Volume
Keep Awake
Menu Bar
Apple M4 Pro14 CPU cores · 48 GB unified memory
Settings⌘,
Mac CareRead this Mac’s protection settings, startup items, and local snapshots.
Search or jump to…⌘K
Checked10:36
3of 4protections enabled
1 disabled · 0 unknown
Protection settings
GatekeeperEnabled
FileVaultEnabled
Application firewallDisabled
System Integrity ProtectionEnabled
Installed metadata
XProtect metadataInstalled
Startup items14
Local snapshots2
Protection settingsConfiguration readings only. This is not a malware scan.Check Again
Gatekeeperassessments enabled
EnabledOpen Settings
FileVaultFileVault is On.
EnabledOpen Settings
Application firewallFirewall is disabled. (State = 0)
DisabledOpen Settings
System Integrity ProtectionSystem Integrity Protection status: enabled.
EnabledOpen Settings
Installed metadata
XProtect metadataXProtect.app: 164 · XProtect.bundle: 5342. Presence does not establish freshness or a malware-free Mac.
Installed
Startup itemsLaunch agents and daemons defined on disk. A definition does not prove a job is loaded or running.Login Items…Processes
com.harbor.vmnetd/Library/PrivilegedHelperTools/com.harbor.vmnetd
Daemon
com.kitebrowser.update.agent/Library/Application Support/Kite Browser/Update/KiteUpdateAgent
Shared agent
com.northwind.sync.agent/Applications/Northwind Sync.app/Contents/MacOS/NorthwindSyncAgent
User agent
com.northwind.sync.helper/Library/PrivilegedHelperTools/com.northwind.sync.helper
Daemon
com.pixelroom.thumbnails/Applications/Pixelroom.app/Contents/Helpers/ThumbnailAgent
User agent
com.quillnotes.reminders/Applications/Quill Notes.app/Contents/Library/LoginItems/QuillReminders.app/Contents/MacOS/QuillReminders
User agent
com.roundtable.audio.driver/Library/Audio/Plug-Ins/HAL/RoundtableAudio.driver/Contents/MacOS/RoundtableAudioDaemon
Daemon
com.roundtable.launcher/Applications/Roundtable.app/Contents/Helpers/RoundtableLauncher
User agent
com.tempoplayer.mediakeys/Applications/Tempo Player.app/Contents/Helpers/MediaKeysAgent
User agent
com.tesseldesign.fontsync/Library/Application Support/Tessel Design/FontSync/fontsyncd
Shared agent
io.forgeide.indexer/Users/sam/Library/Application Support/Forge IDE/bin/forge-indexer
User agent
io.forgeide.remote.tunnelProgram not named in the definition
User agent
org.atlasmaps.offline/Applications/Atlas Maps.app/Contents/Helpers/OfflineTiles
User agent
org.lumenedit.render.queue/Library/PrivilegedHelperTools/org.lumenedit.render.queue
Daemon
Live · every 2sMac Care reads local settings and changes nothingActivity
Step 05

02Good to know

The small print, in plain words

Note1 / 2
This is not a virus scan
Mac Care reads configuration. It does not inspect your files for malware. The line about XProtect only says that Apple's malware definitions are installed, not how fresh they are.
Note2 / 2
A listed startup item may not be running
A definition on disk shows that an app asked to start something. It does not prove the job is loaded. Use Processes to see what is actually running.

03Keep going

Check your Mac's protections

What you need

Steps

Step 1. Open Mac Care

Step 2. Read the four rows

Step 3. Fix what is off, in System Settings

Step 4. Check again

Step 5. See what starts with your Mac

The small print, in plain words

This is not a virus scan

A listed startup item may not be running

Related guides

Get l/Activity

Steps

Step 1. Open Mac Care

Step 2. Read the four rows

Step 3. Fix what is off, in System Settings

Step 4. Check again

Step 5. See what starts with your Mac

This is not a virus scan

A listed startup item may not be running

Uninstall an app and what it left behind

Let l/Activity see protected folders

Stop a runaway process safely

Get l/Activity