Lists · macOS

Privacy and security tools that run on macOS

Open-source password managers, encryption, ad blocking and security tools that run on macOS, with the steps to set each one up.

34 repos, most stars first

morluto/★ 446kreaReverse engineer anything with agents, from app behavior down to native binaries. Easy~5 minTypeScript✓ 1 got it running
sherlock-project/★ 107ksherlockHunt down social media accounts by username across social networks Easy~5 minPython
caddyserver/★ 79kcaddyFast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS Easy~5 minGo
usestrix/★ 75kstrixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities. Easy~5 minPython
GyulyVGC/★ 42ksniffnetComfortably monitor your network traffic 🕵️‍♂️ Easy~5 minRust
searxng/★ 39ksearxngSearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled. Moderate~15 minPython
AdguardTeam/★ 38kAdGuardHomeNetwork-wide ads & trackers blocking DNS server Easy~5 minTypeScript
lissy93/★ 35kweb-check🕵️‍♂️ All-in-one OSINT tool for analysing any website Moderate~15 minTypeScript
ungoogled-software/★ 28kungoogled-chromiumGoogle Chromium, sans integration with Google Easy~5 minPython
AprilNEA/★ 25kOpenLogi⚡️A native, local-first alternative to Logitech Options+, written in Rust 🦀 — remap buttons, DPI, and SmartShift over HID++. No account, no telemetry. Easy~5 minRust
radareorg/★ 25kradare2UNIX-like reverse engineering framework and command-line toolset Moderate~15 minC
smicallef/★ 24kspiderfootSpiderFoot automates OSINT for threat intelligence and mapping your attack surface. Moderate~15 minPython
super-productivity/★ 24ksuper-productivitySuper Productivity is an advanced todo list app with integrated Timeboxing and time tracking capabilities. It also comes with integrations for Jira, GitLab, GitHub and Open Project. Moderate~15 minTypeScript
fosrl/★ 23kpangolinModern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users. Moderate~15 minTypeScript
getlantern/★ 17klanternOpen-source VPN for speed, privacy, and censorship circumvention. Free to download on Android, iOS, Windows, macOS, and Linux. Easy~5 minDart
alam00000/★ 16kbentopdfThe Privacy First PDF Toolkit Moderate~15 minJavaScript
gotify/★ 16kserverA simple server for sending and receiving messages in real-time per WebSocket. (Includes a sleek web-ui) Easy~5 minGo
zaproxy/★ 16kzaproxyThe ZAP by Checkmarx Core project Easy~5 minJava
memstechtips/★ 15kWinhanceApplication designed to optimize, customize and enhance your Windows experience. Easy~5 minC#
ajayyy/★ 14kSponsorBlockSkip YouTube video sponsors (browser extension) Easy~5 minTypeScript
stamparm/★ 8.7kmaltrailMalicious traffic detection system Easy~5 minPython
omlahore/★ 6kRemoveMacAITurn off Apple Intelligence and delete its models on your Mac. Optional tweaks for analytics, ads and pop-ups. A native app and CLI, and every change can be undone. Easy~5 minSwift
InlitX/★ 1.6kGymMane Offline gym log for Android. No account, no ads, no internet. Easy~5 minDart
six2dez/★ 1.6kburp-ai-agentBurp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more Easy~5 minKotlin
yjid/★ 1.5kkensakuSearch inside documents, code, and even screenshots - instantly and locally. A free, open-source file launcher with OCR, semantic search, and MCP agent access. Moderate~15 minRust
owasp-noir/★ 1.5knoirHunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface. Easy~5 minCrystal
1architect/★ 460macspace-releasesA modular, free and open source System Data and Apple Intelligence cleaner for macOS. Easy~5 minSwift
YashwanthKamireddi/★ 285SkykeepNative iCloud apps for Windows and Linux, built in Rust. Notes, Reminders, Calendar, Contacts, Drive and Photos, offline and in sync with your iPhone. Easy~5 minRust
vibheksoni/★ 141dma-spooferFirst open-source DMA-based HWID spoofer written in Rust. Spoof hardware IDs via direct memory access. Easy~5 minRust
gensecaihq/★ 63Wazuh-AutopilotAgentic SOC for Wazuh built on Strands Agents: a 13-agent swarm with 37 Wazuh-verified skills triages, investigates and plans response through the Wazuh MCP Server. Policy-gated autonomy, approvals, RBAC, audit, tracing and evals in one Docker stack. Bedrock, Anthropic, NVIDIA NIM, vLLM, LiteLLM or air-gapped Ollama. Moderate~15 minPython
DahanItamar/★ 59DockNestSelf-hosted Docker backup and restore with a visual server map. Move sites between servers safely, encrypted SFTP or S3 storage, verified restores. Easy~5 minJavaScript
amruth112/★ 2fraudurl-detectorfraudurl: fast, offline phishing URL detector and checker for Python. Check one URL or a whole CSV of links for phishing, with calibrated probabilities and plain-English reasons. One file, zero dependencies, never visits the sites. Easy~5 minPython
sagarmajumdar225/★ 0sm-secure-browserA free, open-source, privacy-first Android web browser built on Mozilla GeckoView with zero-trust architecture. Easy~5 minKotlin
rahmankhanjohn/★ 0airgap-ai-stackPack, verify, deploy, and attest open-weight AI models inside enclaves with no internet egress. Go, zero dependencies. Easy~5 minGo

More for macOS