iCloud diskutil DisableGuestAccount NIST APFS

ASM Firewall SIP benchmark scutil

StartupItem 800-53 SecureBoot nvram enabled

Entitlements historyCount LaunchAgent Hardened Runtime WiFi

SmartCard TouchID MACE com.apple.loginwindow pwpolicy

ARDAgent SIP diskutil lockoutDuration Hardened Runtime

csrutil CMMC FaceID lockoutDuration com.apple.Terminal

BluetoothSharing BlockAllIncoming DFU requireAlphanumeric sandbox

PacketTunnel SystemPolicy read softwareupdate nvram

lockoutDuration security /Library/Preferences defaults SocketFilter

TouchID FirewallEnabled GlobalPreferences codesign profile

ApplicationFirewall StealthMode 800-53 launchctl diskutil

iCloud VPN PasswordPolicy ApplicationFirewall MRT

ScreenSaverDelay SecureToken StealthMode BlockAllIncoming CMMC

SmartCard nvram APFS com.apple.security idleTime

PayloadType Hardened Runtime IPSW hdiutil Rosetta

ManagedPreferences SecureEnclave SecureBoot ActiveDirectory ScreenRecording

plist iCloud autopkg requireAlphanumeric DisableGuestAccount

com.apple.mail minLength ASR Accessibility SystemPolicy

800-53 remediate Bootstrap PrivacyPreferences SecureEnclave

Notarization BlockedApplications RecoveryOS iCloud quarantine

com.apple.SystemPolicy requireSymbol DFU TCC expirationDays

com.apple.mail scutil PlatformSSO ScreenSaverDelay InternetSharing

DDM BlockedApplications com.apple.TCC Notarization PasswordPolicy

/Library/Preferences mSCP PrivacyPreferences SCEP LDAP

Sidecar StealthMode false Gatekeeper Camera

RemoteLogin Gatekeeper AuthorizationRight com.apple.Safari com.apple.mail

InternetSharing SecKeychain AuthorizationDB SystemUIServer com.apple.TCC

required BluetoothSharing SCEP csrutil dscl

SecureToken networksetup PrivacyPreferences baseline osascript

nvram com.apple.security com.apple.screensaver scutil AirDrop

GlobalPreferences OIDC PlatformSSO AppNap CAC

Firewall AuthorizationDB ScreenRecording pmset spctl

hdiutil FaceID PacketTunnel MRT autopkg

Entitlements lockoutDuration DFU OpenDirectory SAML

RecoveryOS Rosetta OTA AppleSilicon CIS

FaceID ContentFilter Bluetooth ConfigurationProfile SSO

SecKeychain T2 ASR StartupItem SecureEnclave

CMMC ActiveDirectory SSO PlatformSSO Ethernet

kextunload systemsetup sudo SecKeychain codesign

com.apple.Safari com.apple.security jamf killall /Library/Preferences

CryptoTokenKit NIST /Library/Preferences csrutil FirewallEnabled

askForPassword ApplicationFirewall chown security Rosetta

Entitlements APFS PrinterSharing codesign InternetSharing

SecureToken maxFailedAttempts WiFi requireAlphanumeric com.apple.SystemPolicy

OIDC DEP com.apple.screensaver PayloadType osascript

CIS com.apple.loginwindow com.apple.security CryptoTokenKit PrinterSharing

PayloadContent read Bootstrap hdiutil TouchID

LoginItem sudo Camera BlockAllIncoming codesign

com.apple.SystemPolicy DEP XProtect ApplicationFirewall LaunchDaemon

read nvram write xattr benchmark

enabled InstallApplication com.apple.dock nvram firmwarepasswd

MACE DFU ActiveDirectory PayloadUUID SAML

AirDrop loginwindow AuthorizationDB SecKeychain Bluetooth

VPP write compliant firmwarepasswd munki

Notarization ASM Rosetta ApplicationFirewall com.apple.security

write FileVault killall com.apple.screensaver defaults

payload Rosetta requireAlphanumeric OIDC UniversalControl

RemoteLogin Firewall DirectoryService payload pmset

softwareupdate kernel_task Notarization MACE requireAlphanumeric

M.A.C.E.

macOS Advanced Compliance Editor

Build, customize, audit, and deploy macOS security baselines

Get Started Download

💬 Join us in #mace-app on Mac Admins Slack

No Command Line Required

Visual interface for creating and managing compliance baselines. Built with SwiftUI for a fast, native macOS experience.

Create

All-in-One Workflow

Create, customize, audit, and export from a single app. Browse 500+ security rules with powerful search and filtering.

.mobileconfig

✓✓✓

MDM-Ready Exports

Generate deployment-ready profiles for Jamf, Intune, and more. Export to mobileconfig, plist, DDM, and signed profiles.

M.A.C.E.

No Command Line Required

All-in-One Workflow

MDM-Ready Exports

See MACE in Action

Main Menu

Ready to Simplify macOS Compliance?