Your Mac stays yours.

Settings, not content: whether your disk is encrypted, the firewall, Gatekeeper and System Integrity Protection, updates, screen lock, accounts and the password policy, which ports are open, remote access and file sharing, programs that start in the background and at login, backups, the permissions of your browser extensions, and your SSH keys and shell config files.

It reads them with a fixed list of read-only system commands and a few known files. The check never runs as root and needs no administrator password.

Your documents, mail, messages, photos, browser history, saved passwords or the Keychain.

It does not read the contents of your files, with two narrow exceptions. It reads the first 4 KiB of each SSH key to tell whether the key has a passphrase. It scans a fixed list of shell config files, line by line, for patterns that look like passwords or keys. A match records the file, the kind of pattern and the line number, never the value itself.

Nothing, by default. The app makes no network connection. The scan runs on your Mac and the report stays on your Mac. It never sends your computer's name, the names of your shared folders, the arguments of background programs or any file path anywhere.

AI explanations use Apple Intelligence on your Mac. The model receives rule ids, results, severities, points, counts and your profile. It never receives a file path, a program name, a file name or any other text from your Mac.

Developer mode lets you add Claude with your own Anthropic API key, or an Ollama server on your own Mac. That is the only network connection you can add, and it receives the same limited document.

Nothing until you press the button for a fix. Each fix is an exact command from a fixed table built into the app. There is no way to run anything else, from the app or from the AI.

When a fix needs an administrator, the app shows you the exact commands first. Then macOS shows its own password dialog and runs those commands, and only those, as an administrator. Talos Labs never sees your password and never stores it.

Some settings it will not change for you: FileVault, System Integrity Protection, the password policy, account changes and deleting launch items. For FileVault and accounts it opens the right page in System Settings. For the others it gives you written steps.

This site sets no cookies and has no analytics. It runs no scripts, has no forms and loads nothing from other companies' servers: every page, stylesheet and image comes from taloslabs.si. Text uses your device's own system font.

Like any website, the server that delivers these pages receives your request, including your IP address, in order to answer it.