Rempart · Protection
Rempart: threats, privacy and permissions under control
Rempart brings together three checks people rarely do, mostly because they do not know where to look: malicious files and suspicious agents installed on the Mac, browsing traces left by your browsers and by macOS, and the permissions granted to each app (camera, microphone, disk and so on).
One scan, three columns of results, and nothing changes without your approval. Rempart complements macOS's built-in protections (Gatekeeper, XProtect); it does not claim to be a full antivirus or to catch everything.
Malicious files and suspicious agents
Rempart compares the files on your Mac with its threat database, by hash and by name, and reviews launch agents and daemons: small programs that start with your session and run in the background, often used by adware.
- Threats: a match with a known signature.
- To review: unusual items (an agent with no matching app, an odd location) that call for your judgment.
- Configuration profiles: flagged when present; they are removed in System Settings, which Rempart opens for you.
A removed agent is stopped first, then its file goes to the Trash. The signature database is updated every day: see the daily threat feed.
Privacy: browsers, recent items, Wi-Fi
For each browser it finds, Rempart lists separately:
- cookies, history and the downloads list;
- saved sessions and tabs;
- autofill data.
On top of that come macOS recent items and saved Wi-Fi networks, which you can forget one by one. Passwords are never touched; cookies and history are simply recreated empty by the browser. Quit the browser before cleaning: if it is open, its items are skipped.
Safari data and recent items can only be read once you grant MacNeat Full Disk Access in System Settings > Privacy & Security.
App permissions
Install after install, we click "Allow" without thinking. Rempart reads the macOS permissions database and shows, app by app, what has been granted: camera, microphone, contacts, photos, location, screen recording, accessibility, full disk access, automation and many more. Each permission shows as allowed, denied or limited.
One click on Revoke removes the access; the app will ask again at its next launch. Permissions are not files: revocation goes through the system tool tccutil, and some cases send you to the right pane in System Settings. Here too, reading the full list requires Full Disk Access.
Sober, reversible protection
- Everything goes through the Trash: suspicious files and browsing data are moved, not erased.
- Log and undo: every operation is recorded and can be undone (only forgetting a Wi-Fi network and revoking a permission are reversed differently: by rejoining the network or re-allowing the app).
- Local scan: nothing from your Mac is uploaded for analysis.
- Apple Silicon and Intel.
- Free scan; removal and revocation with a license (7-day trial).
For a quick check built into weekly maintenance, Éclair includes Rempart's threat check.