Your Mac. Understood.
A calm check-up
for your Mac.
Talos Labs is a Mac app you buy once. It checks your Mac's security settings with 31 rules, most of them drawn from the CIS Apple macOS 26 Tahoe Benchmark. Then it explains what it finds in plain words and fixes most of it in place.
Not on sale yet. A one-time purchase. No account. No background agent.
Quietly in control
Security, without the noise.
Talos Labs tells you what is wrong, why it matters for you, and fixes most of it in place. It is written for people who are not security experts.
-
01 / Check
Find what matters.
Open the app and it checks your Mac against 31 rules. The check runs on your Mac. There is no account and no upload.
-
02 / Understand
Plain words. Clear choices.
Every finding comes with a written explanation of what is wrong and why it matters, and a complete fix.
-
03 / Fix
Guided, not automated away.
Nothing changes until you press the button. When a fix needs an administrator, macOS asks for your password in its own dialog. Talos Labs never sees it.
The guided check-up
One clear step at a time.
Open the app and it checks your Mac. Then it walks you through a short plan, one screen at a time.
It fixes what it can with one administrator password. For most of the rest, it opens the right page in System Settings and watches until you have made the change. The few that need a person are listed, not touched.
Each step is one plain sentence, one button and one link. The expert screens are one click away under Details.
It speaks only when you open it. No notifications, no menu bar agent, no background scans.
1 of 5
The firewall is off.
It keeps other computers on the same Wi-Fi from reaching your Mac. I can fix that for you. Your Mac will ask for your password.
Do this laterThe design rule
Code judges. The AI explains.
Fixes come from a fixed table built into the app. That rule shapes everything Talos Labs does.
-
01 / Collect and judge
Facts, not guesses.
The app reads your settings with a fixed list of read-only system commands, without an administrator password. A rule engine turns the readings into a score and a list of findings. The same readings always give the same result.
-
02 / Explain
Explained on your Mac.
The AI runs on your Mac through Apple Intelligence. It receives rule ids, results and numbers, never text from your Mac. It never writes a fix and never runs anything. Its text is marked as not verified.
-
03 / Fix
A fixed table.
Each fix is an exact command written into the app. Nothing outside that table can run, from the app or from the AI. Settings the app will not change for you, like FileVault, open in System Settings.
“Nothing leaves your Mac.” No account. No server. No background agent.
The scan runs on your Mac, the AI runs on your Mac and the report stays on your Mac. By default the app makes no network connection at all. It never reads your documents, mail, messages, photos, browser history, saved passwords or Keychain.
What it checks
31 rules, in plain words.
The rules follow the CIS Apple macOS 26 Tahoe Benchmark v1.0.0 wherever it has a matching control. A setting the app could not read is shown as “Couldn’t check”, never as a pass.
-
Disk encryption 1 rule
FileVault is on.
-
Network 3 rules
The firewall and stealth mode are on, and no program is listening for connections from the network.
-
Built-in protection 3 rules
Gatekeeper, System Integrity Protection and XProtect.
-
Updates 5 rules
Updates are checked, downloaded and installed on their own, nothing is waiting, and app updates are automatic.
-
Screen lock and accounts 6 rules
A password right after the screen locks, a screen saver within 20 minutes, an everyday account that is not an administrator, Guest off, no automatic login, and the password policy.
-
Remote access 3 rules
Remote Login, Screen Sharing and Remote Management are off.
-
File sharing 1 rule
No shared folder is open to everyone without a password.
-
Background programs 3 rules
What starts in the background, launch items that point at missing files, and apps that open at login.
-
Backups 2 rules
Time Machine is set up and a backup ran in the last 7 days.
-
Browser extensions 1 rule
No extension can read every website you visit.
-
For developers 3 rules
SSH keys have a passphrase, the SSH folder is private, and no password or key sits in a shell config file.
Requirements
Works without AI, too.
Every finding has a written explanation and a complete fix, so the app is complete with the AI switched off.
-
01 / Mac
macOS 26 or later.
One universal build for Apple silicon and Intel Macs. Its checks and fixes have been verified on Apple silicon so far.
-
02 / AI
Apple Intelligence, if you have it.
AI explanations need Apple silicon with Apple Intelligence turned on. On other Macs, everything else works. One switch in Settings turns the AI off.
-
03 / Permissions
Asked for only when needed.
Full Disk Access lets it read browser extension folders. Automation lets it read login items. Both are optional and asked for when a check needs them.
Talos Labs for macOS
Feel at ease with your Mac.
Coming soonNot on sale yet. One payment, no subscription, no account. macOS 26 or later.