
File-access control for macOS that protects sensitive user data from supply-chain attacks using Endpoint Security.

Every npm install, pip install, and brew upgrade executes arbitrary native code with your full file system permissions. One compromised package can silently read your SSH keys, AWS credentials, iMessages, and browser cookies. You will not know until it is too late. ClearanceKit intercepts file-system access events on macOS — opens, renames, deletions, hard links, creates, truncations, copies, directory reads, data exchanges, and clones — and enforces per-process access policies for paths you designate as protected. Any process accessing a protected path without an explicit allow rule is blocked. Jail rules go further: a jailed process is confined to a specified set of path prefixes, and any file access outside those prefixes is denied regardless of other policy rules. Denied events surface in a native SwiftUI interface so you can review them and build policy as you work — no configuration files required. Policies are bound to cryptographic code signing identity — the Developer ID certificate and bundle identifier embedded in the binary — not to file paths or hashes. A trojanised binary is denied even if it sits at the expected path. Policies survive software updates without any maintenance, because a developer's signing identity does not change between releases.
ClearanceKit is built on open-source principles to guarantee security, privacy, and full reproducibility. All sensitive data transformations run locally on your hardware with zero telemetry or unexpected cloud dependencies.
| Specification | Minimum Requirement | Recommended Specification |
|---|---|---|
| Operating System | macOS 12.0 Monterey / Windows 10 x64 | macOS 14.0+ Sonoma / Windows 11 x64 |
| Processor Architecture | Apple Silicon (M1+) or Intel Core i5 x64 | Apple Silicon Unified Memory (M2/M3/M4) |
| Memory (RAM) | 4 GB Unified RAM | 8 GB+ High-Speed RAM |
| Storage Space | 300 MB available local disk space | 1 GB+ SSD storage |
| GPU Acceleration | Metal 2 / DirectX 12 compatible | Apple Neural Engine / Vulkan capable |
.dmg release installer directly from CookApps./Applications folder.Cmd + Space) or Launchpad.Alternatively, install using Homebrew if available:
brew install --cask clearancekit
.exe / .msi).git clone https://github.com/craigjbass/clearancekit.git cd clearancekit cargo build --release cargo run --release
Cmd + , (macOS) or Ctrl + , (Windows) to configure hardware acceleration, custom directories, and display themes.xattr -cr /Applications/ClearanceKit.app
100% Free & Open-Source native desktop software. Star the repository to support development.

Ten menu bar utilities in one app: a window manager with snap zones you draw yourself, workspaces that reopen your apps on the right monitor, on-device ...

Better input source switcher for macOS.

Tells you, in plain English, what each USB-C cable plugged into your Mac can do - speed, power, and e-marker info - from the menu bar.