Skip to main content
FileSharing TimeMachine MRT PasswordPolicy SSHEnabled
spctl Continuity SecKeychain chown PasswordPolicy
AppleSilicon CryptoTokenKit Rosetta MACE security
AppleSilicon networksetup pwpolicy idleTime OTA
PlatformSSO munki networksetup enabled sudo
allowed write fdesetup Gatekeeper hardening
LoginwindowText disabled diskutil PrivacyPreferences com.apple.dock
networksetup Entitlements PacketTunnel loginwindow lockoutDuration
SecKeychain true TouchID CIS minLength
800-171 ASR OAuth hdiutil chmod
CAC kextload Gatekeeper chmod com.apple.mail
SecureBoot Kerberos networksetup idleTime RemoteLogin
sudo baseline SecureBoot chown diskutil
read FindMy com.apple.finder write diskutil
ditto com.apple.Safari hardening SSO AuthorizationRight
PacketTunnel com.apple.loginwindow GlobalPreferences defaults askForPassword
NSGlobalDomain chown ditto disabled enabled
TouchID STIG FindMy sandbox CIS
com.apple.SystemPolicy sandbox pmset enabled chown
ActiveDirectory OIDC Handoff minLength csrutil
OpenDirectory Bluetooth FaceID OIDC FindMy
800-171 PacketTunnel security munki xattr
XProtect com.apple.loginwindow nvram plutil translocation
com.apple.dock read hdiutil write pwpolicy
PlistBuddy plist PrinterSharing ABM FullDiskAccess
AppNap Volume com.apple.loginwindow systemsetup RecoveryOS
maxFailedAttempts killall pwpolicy 800-171 chmod
/Library/Preferences chown plist fdesetup SAML
RemoteManagement enabled SecureBoot kextunload APFS
PIV osascript xattr 800-171 mobileconfig
compliant sudo pmset remediate TCC
SystemUIServer Spotlight minLength quarantine LaunchDaemon
com.apple.Safari historyCount compliant TimeMachine LaunchAgent
read Rosetta Gatekeeper SecureToken BluetoothSharing
WindowServer mSCP Microphone remediate SCEP
Bluetooth Handoff ARDAgent com.apple.SystemPolicy pmset
SCEP mdmclient SecureEnclave sudo Entitlements
ContentFilter OAuth munki SSO SmartCard
RequirePassword kextunload dscl GlobalPreferences mdmclient
SecKeychain TimeMachine plist RecoveryOS GlobalPreferences
sudo OTA Entitlements SecureBoot ASM
softwareupdate Handoff scutil PrinterSharing ManagedPreferences
SIP com.apple.mail Accessibility Microphone askForPassword
required VPP CIS WiFi munki
security BlockedApplications osascript munki com.apple.finder
RestrictedSoftware iCloud SocketFilter baseline WindowServer
nvram FullDiskAccess MACE pmset read
plist STIG SystemPolicy compliant com.apple.finder
pmset SecKeychain SSHEnabled PacketTunnel baseline
ManagedPreferences nvram SecureBoot write profiles
minLength MRT TCC SystemUIServer IPSW
PrinterSharing Keychain TouchID Handoff GlobalPreferences
security pwpolicy PlistBuddy mdmclient spctl
kextload nvram com.apple.mail idleTime MCX
requireSymbol RemoveApplication AuthorizationDB Camera systemsetup
idleTime MACE TimeMachine sudo requireSymbol
BluetoothSharing UniversalControl sudo SSO DEP
FindMy Entitlements PasswordPolicy SAML SSO
ActiveDirectory Firewall com.apple.TCC MRT RemoteLogin
SecureBoot Hardened Runtime ABM SecureToken false
MACE App Icon

M.A.C.E.

macOS Advanced Compliance Editor

Build, customize, audit, and deploy macOS security baselines

Get StartedDownload
💬 Join us in #mace-app on Mac Admins Slack
$|

No Command Line Required

Visual interface for creating and managing compliance baselines. Built with SwiftUI for a fast, native macOS experience.

Create

All-in-One Workflow

Create, customize, audit, and export from a single app. Browse 500+ security rules with powerful search and filtering.

.mobileconfig
✓✓✓

MDM-Ready Exports

Generate deployment-ready profiles for Jamf, Intune, and more. Export to mobileconfig, plist, DDM, and signed profiles.

See MACE in Action

Main Menu
Compliance Editor
Rule Builder
Audit & Export
Build Hub
Documentation

Main Menu

Your compliance command center

Ready to Simplify macOS Compliance?

Download MACE for free and start building your security baselines today.

Download MACERead the Docs