12,000+Downloads

800+Security rules

160+GitHub stars

No Command Line Required

mSCP normally runs on scripts. MACE takes that hassle away, offering the official mSCP build engine alongside its own native engine for building compliance.

New baseline

All-in-One Workflow

Create, customize, build, audit, and document baselines in one app. 800+ rules from every supported macOS, iOS, and visionOS release in NIST's macOS Security Compliance Project.

.mobileconfig

✓✓✓

MDM-Ready Exports

Deploy straight to Jamf Pro, Workspace ONE, Intune, Iru, Fleet, Addigy, and more, or build mobileconfig, plist, DDM, and signed profiles locally for any MDM.

Built for the frameworks you answer to

CIS Level 1 & 2
NIST 800-53
DISA STIG
CMMC
NIST 800-171
CIS v8
CNSSI-1253
HICP
NL MAPGOV

See every baseline on the mSCP GitHub

See MACE in Action

Main Menu

Your compliance command center

See What MACE Produces

Real output from a real build.

Audit Report

Rule-by-rule pass and fail results with pass rate, severity, and compliance mapping, ready to hand to an auditor.

HTML PDF XLSX CSV JSON Markdown AsciiDoc

Compliance Documentation

Full baseline guide with rule discussions, check procedures, and remediation steps for every control.

HTML PDF XLSX CSV JSON Markdown AsciiDoc

* Every report is fully customizable. These are the default outputs.

nvram TouchID OTA SecKeychain AuthorizationDB

SecureBoot Entitlements 800-171 ApplicationFirewall ARDAgent

plutil InstallApplication com.apple.mail Handoff NSGlobalDomain

SSO AuthorizationRight SIP CIS payload

800-171 Microphone Gatekeeper benchmark remediate

ARDAgent pmset LoginwindowText mdmclient CIS

FaceID NSGlobalDomain chmod SecKeychain VPN

lockoutDuration Sidecar STIG Entitlements PayloadContent

RemoteLogin systemsetup com.apple.finder munki diskutil

PowerNap systemsetup ditto defaults profiles

firmwarepasswd DEP MACE hardening com.apple.security

TCC write nvram com.apple.loginwindow profiles

SecKeychain AppNap FindMy ConfigurationProfile chown

historyCount csrutil softwareupdate MDM plutil

loginwindow SecKeychain Hardened Runtime ConfigurationProfile autopkg

hardening ditto compliant Keychain disabled

plist defaults nvram LoginwindowText jamf

RemoteManagement MDM SocketFilter historyCount SecureBoot

security FileSharing /Library/Preferences AuthorizationRight quarantine

com.apple.loginwindow CMMC GlobalPreferences ScreenSaverDelay OpenDirectory

kextunload plutil /Library/Preferences /System/Library DisableGuestAccount

FileVault /System/Library com.apple.loginwindow SSO TimeMachine

NIST /System/Library csrutil defaults maxFailedAttempts

Ethernet mobileconfig SecKeychain sudo /var/db

VPP TouchID T2 Gatekeeper AuthorizationDB

Firewall CryptoTokenKit mdmclient read Entitlements

Entitlements PrivacyPreferences sudo Sidecar systemsetup

ScreenSharing ASM AuthorizationDB ARDAgent requireAlphanumeric

MACE CMMC Hardened Runtime ditto required

com.apple.SystemPolicy compliant CAC ApplicationFirewall BluetoothSharing

AllowedApplications AppNap security TimeMachine ScreenSaverDelay

AllowedApplications AppleSilicon OAuth IPSW OpenDirectory

Handoff OTA lockoutDuration TimeMachine PIV

PrinterSharing requireAlphanumeric StartupItem ARDAgent AuthorizationRight

RestrictedSoftware Gatekeeper osascript com.apple.loginwindow DisableGuestAccount

kernel_task autopkg FirewallEnabled codesign idleTime

SSO 800-53 com.apple.mail plutil UniversalControl

quarantine DDM sudo diskutil jamf

com.apple.SystemPolicy FaceID askForPassword ActiveDirectory TouchID

MACE RequirePassword disabled LoggingEnabled scutil

800-53 sudo defaults ASM historyCount

ABM RecoveryOS RemoveApplication SecureToken TouchID

osascript compliant com.apple.screensaver DEP RemoteManagement

pwpolicy Notarization jamf DFU profiles

MDM AppNap PrinterSharing MCX PIV

TouchID T2 Notarization com.apple.Safari PlistBuddy

Volume SAML com.apple.SystemPolicy InternetSharing FileVault

LoginwindowText STIG MCX SecureBoot launchctl

RemoteLogin ConfigurationProfile FaceID translocation minLength

GlobalPreferences plist CAC AirDrop Entitlements

Gatekeeper Firewall ConfigurationProfile remediate DEP

payload baseline fdesetup xattr quarantine

historyCount Gatekeeper read remediate hardening

PrinterSharing kextunload SecureBoot read STIG

ditto FileSharing com.apple.dock Entitlements InstallApplication

plist historyCount PlistBuddy CMMC PasswordPolicy

payload chmod softwareupdate profile PasswordPolicy

FileVault PlistBuddy /var/db ApplicationFirewall requireAlphanumeric

com.apple.security FindMy SAML SecureBoot networksetup

defaults hdiutil ScreenSaverDelay firmwarepasswd BluetoothSharing

Ready to Simplify Apple Compliance?

Download MACE for free and start building your security baselines today.

Download MACE Read the Docs