BlockBlock
Receive alerts when software attempts to establish persistence.GetGPL-3.0
KnockKnock
Inspect software configured to persist on your Mac.
GPL-3.0 · Downloads from github.com
- License
- GPL-3.0
- Open source
- Source
- GitHub
- objective-see
- Verified
- 2026
About KnockKnock
KnockKnock scans common places where software arranges to run automatically. It helps you inspect persistent components and follow up on unfamiliar items.
The results are an inventory for investigation, not a declaration that every listed item is malicious. The official product page explains the findings and available integrations.
Information
- Source code
- objective-see/KnockKnock
- License
- GPL-3.0
- Website
- objective-see.org
- Download
- github.com
- Category
- Privacy & security
- Evidence checked
- Tags
Maco links to each project’s official download. Check its release notes for macOS version and Apple silicon support. The verification date records our license and source review, not a security audit.
Sources and image credits
- github.com/objective-see/KnockKnock
- github.com/objective-see/KnockKnock/blob/main/LICENSE
- github.com/objective-see/KnockKnock/blob/main/README.md
- github.com/objective-see/KnockKnock/releases
- icon.png: KnockKnock contributors. GPL-3.0; upstream app artwork, trademark rights retained..
License and artwork notices
You Might Also Like
Dylib Hijack Scanner
Scan for applications susceptible to dynamic-library hijacking.GetGPL-3.0
ReiKey
Inspect keyboard event taps that can observe keystrokes.GetGPL-3.0
ClearanceKit
Block processes from protected files unless a rule tied to their code-signing identity allows it.GetMIT
fob
Keeps SSH and Git signing keys in the Secure Enclave and asks for Touch ID, naming the destination, before each use.GetAGPL-3.0
MakLock
Lock chosen apps behind Touch ID, Apple Watch or a password, with auto-lock on idle or sleep.GetMIT
Netiquette
Inspect network connections and the processes behind them.GetGPL-3.0
OverSight
See alerts when processes use your Mac's microphone or camera.GetGPL-3.0
Pareto Security
Check your Mac for common security misconfigurations such as disabled FileVault, firewall or automatic updates.GetGPL-3.0
PureSnitch
Watch which hosts your Mac connects to and block untrusted ones with rules enforced by the packet filter.GetMIT
RansomWhere?
Watch for suspicious file encryption activity on your Mac.GetGPL-3.0
Santa
A binary and file access authorization system for macOS that can monitor or block executables by signature or path.GetApache-2.0