Comprehensive macOS Persistence Auditor
Discover and analyze every application, service, and task configured to run automatically on your Mac. LaunchAudit scans 35 persistence categories across 9 groups, validates code signatures, and scores each item for risk — all from a native macOS dashboard or the command line.
Full visibility into what runs on your Mac
Scans launch daemons and agents, login items, scheduled tasks, extensions, security plugins, and deprecated mechanisms across 9 logical groups.
Validates code signatures and notarization status with up to 12 concurrent verifications, flagging unsigned or third-party software automatically.
Each item is rated Informational, Low, Medium, High, or Critical based on signing trust, mechanism severity, execution context, location, and temporal signals.
Interactive summary cards and charts, sidebar navigation grouped by category, a detail inspector for full metadata, and keyboard shortcuts for scan and export.
Headless scan mode for terminals and scripts, with filters for category, group, risk level, and signing status. Quiet mode emits key=value output for automation.
Export full-fidelity JSON for tooling, CSV for spreadsheets, or self-contained styled HTML reports to share with your team.
Browse, filter, and inspect every persistence item at a glance
Run audits from your terminal or CI pipeline
# Run a full scan
$ launchaudit scan
# Show only unsigned items
$ launchaudit scan --unsigned-only
# Filter by minimum risk level
$ launchaudit scan --min-risk high
# Export a self-contained HTML report
$ launchaudit scan -o report.html
# Machine-readable output for scripting
$ launchaudit scan --quiet
Three ways to get started
Grab the latest signed and notarized build from the GitHub Releases page.
brew install --cask launchaudit
Use XcodeGen with the included project.yml. Requires Xcode 16 and Swift 5.9.
Modular, testable, and built for macOS
The main app, providing both the native macOS dashboard and the command-line interface in a single universal binary.
The core scanning framework — 35 individual scanners, the risk analyzer, and export handlers for JSON, CSV, and HTML.
A privileged XPC helper for scanning system-level locations that require elevated access.
A unit test suite covering scanners, risk scoring, and export formats to keep audits dependable as macOS evolves.
LaunchAudit is free, open source, and released under the MIT License.
View on GitHub