Skip to main content
RestrictedSoftware fdesetup UniversalControl FaceID defaults
xattr codesign pwpolicy XProtect pmset
FullDiskAccess jamf SystemPolicy DirectoryService MRT
SecKeychain Gatekeeper RequirePassword hardening pmset
com.apple.finder /System/Library compliant disabled SCEP
SystemUIServer ARDAgent StealthMode audit ditto
launchctl PlatformSSO hardening kernel_task SecKeychain
PacketTunnel Sidecar PrinterSharing CAC T2
requireAlphanumeric /var/db idleTime killall codesign
sudo hardening Hardened Runtime SAML diskutil
SecureBoot mobileconfig security PlatformSSO killall
requireAlphanumeric mobileconfig osascript com.apple.Terminal sudo
SecureToken SocketFilter kextunload AllowedApplications RemoveApplication
DFU ManagedPreferences BlockedApplications OTA Rosetta
Volume ditto SecureToken benchmark dscl
DirectoryService SecureBoot write LoggingEnabled pmset
ContentFilter VPP Gatekeeper /System/Library AuthorizationRight
diskutil SecKeychain LDAP T2 hardening
Camera AirDrop askForPassword ScreenRecording diskutil
Continuity jamf xattr PIV UniversalControl
CIS sudo SystemUIServer PIV csrutil
read defaults jamf Gatekeeper askForPassword
askForPassword compliant firmwarepasswd expirationDays RemoveApplication
Continuity RecoveryOS RemoveApplication NSGlobalDomain DEP
FileVault required baseline ditto com.apple.Terminal
DFU sudo Gatekeeper hdiutil NSGlobalDomain
true SystemPolicy SecureBoot sandbox profile
read osascript write ASR SecKeychain
NSGlobalDomain false LoginwindowText OTA codesign
ScreenSaverDelay PayloadType DisableGuestAccount RestrictedSoftware Bootstrap
mobileconfig MRT systemsetup RecoveryOS audit
UniversalControl write MCX PIV false
profiles nvram read write LaunchDaemon
PayloadType read translocation minLength write
MACE plutil DFU com.apple.Safari NSGlobalDomain
Volume BlockedApplications SecureEnclave compliant requireAlphanumeric
FileSharing com.apple.mail csrutil sudo ScreenRecording
APFS OIDC OAuth pwpolicy ContentFilter
ConfigurationProfile SIP MACE LaunchAgent Handoff
BlockAllIncoming sudo PowerNap AirDrop pmset
Handoff MDM PrivacyPreferences SCEP kextunload
systemsetup PIV ScreenSaverDelay StealthMode nvram
ASR askForPassword AirDrop TimeMachine Gatekeeper
security quarantine softwareupdate MACE loginwindow
SecKeychain MDM write systemsetup APFS
systemsetup PayloadContent FaceID lockoutDuration hardening
diskutil SmartCard ContentFilter kernel_task DFU
BlockAllIncoming PayloadType csrutil Entitlements WiFi
Kerberos com.apple.TCC DisableGuestAccount enabled WiFi
Gatekeeper SecKeychain mdmclient com.apple.dock Notarization
Entitlements munki Keychain nvram Microphone
MCX pmset 800-171 Gatekeeper NSGlobalDomain
UniversalControl Keychain Gatekeeper SCEP com.apple.security
mdmclient LaunchDaemon ContentFilter com.apple.Safari PlistBuddy
StartupItem OAuth SCEP LoginwindowText WindowServer
/usr/bin ScreenRecording DDM FileVault mdmclient
DisableGuestAccount MRT SecureBoot FirewallEnabled allowed
expirationDays Accessibility FullDiskAccess com.apple.Terminal SCEP
PlistBuddy xattr hdiutil disabled enabled
idleTime scutil Hardened Runtime ARDAgent ConfigurationProfile
MACE App Icon

M.A.C.E.

macOS Advanced Compliance Editor

Build, customize, audit, and deploy macOS security baselines

Get StartedDownload
💬 Join us in #mace-app on Mac Admins Slack
$|

No Command Line Required

Visual interface for creating and managing compliance baselines. Built with SwiftUI for a fast, native macOS experience.

Create

All-in-One Workflow

Create, customize, audit, and export from a single app. Browse 800+ security rules with powerful search and filtering.

.mobileconfig
✓✓✓

MDM-Ready Exports

Generate deployment-ready profiles for Jamf, Intune, and more. Export to mobileconfig, plist, DDM, and signed profiles.

See MACE in Action

Main Menu
Compliance Editor
Rule Builder
Audit & Export
Build Hub
Documentation

Main Menu

Your compliance command center

Ready to Simplify macOS Compliance?

Download MACE for free and start building your security baselines today.

Download MACERead the Docs