Window app

Parapet

The macOS security guide,
turned into one-click checks.

Download Learn more ›

Version 1.0 · macOS 14 Sonoma or later · 1.2 MB zip

Overview⟳ Re-checkActivity
Overview
GUIDE
Basics
Threat model
Hardware
Installing macOS
Admin and user accounts
Firmware
FileVault
Lockdown Mode
Firewall
Services
DNS
Privacy
TOOLS
Hosts blocker
Packet filter
App inspector
Threat model
72
Mostly secure
31 checks · 2 need attention · 2 to review
Firewall is off
Application layer firewall
Needs attention</>Enable
Stealth mode is off
Ignore ICMP pings and probes
Needs attention</>Enable
Screen lock delay is 5 minutes
Require password immediately
Review</>Apply
Bonjour advertising is on
Multicast DNS service ads
Review</>Apply
FileVault is on
Full-disk encryption
Secure</>Revert
System Integrity Protection is on
csrutil status
Secure</>
Gatekeeper is on
spctl --status
Secure</>Revert
Overview: a score, every check that needs attention, and one-click fixes.

A security checklist that checks itself.

Parapet turns drduh’s macOS Security and Privacy Guide into a native app. Every section of the guide is a page, and every recommendation it can verify is a live check with a fix and a revert.

The guide, as a sidebar

Every section and subsection has its own page: a summary, copyable commands, links and the related settings.

Overview score

A score and every check that needs attention, with one-click fixes.

Live checks

Firewall, stealth mode, FileVault, SIP, Gatekeeper, XProtect age, screen lock, Bonjour, Remote Login, custom CAs and more.

Nothing hidden

Press </> to see the exact commands a fix or revert will run, before it runs.

Built-in tools

Hosts blocker, per-service DNS, pf rules and blocklists, launch items, an app signature inspector and a log viewer.

Activity log

A separate window records every command Parapet ran, with its output.

Careful by design.

Parapet changes system settings, so it’s built to show its work and ask before acting.

Each check

Status
Secure · Needs attention · Review · Info
Apply the guide’s recommendation
Fix
Restore the macOS default
Revert
Show the exact commands

Administrator actions

Prompt
The standard macOS admin password dialog
Authorization
Never cached; asked for each action

Tools

Hosts blocker
Validated list import
Packet filter
Status, rules, blocklists, ASN lookup
App inspector
Signature, sandbox and Hardened Runtime

Commands run as argument arrays with absolute paths, never through a shell string. Input that reaches a command or system file is validated first. The guide is provided “as is”: you’re responsible for the settings you change.

Tech specs

Requirements
macOS 14 Sonoma or later
Security
Hardened Runtime. Not sandboxed, because it has to run system tools.
Version
1.0 · ad-hoc signed
Download
Parapet.zip · 1.2 MB

Get Parapet.

For macOS 14 and later. Start with the Overview to see where your Mac stands.

Download · 1.2 MB