Security Posture & Accounts

macOS protections, users, guest account, screen lock, updates.

11 tools — 6 read-only, 5 that always ask your approval first.

Read-only tools never modify anything; anything that changes your Mac pauses on an Approve card first.

11 shown

check_security_settings Read-only

Read this Mac's core security posture in one shot: FileVault disk encryption, the application Firewall, Gatekeeper, System Integrity Protection (SIP), and automatic updates — each on/off.

check_remote_management Read-only

Check which remote-access doors are actually listening on this Mac: Remote Login (SSH), Screen Sharing, and Remote Management (ard).

list_users_and_groups Read-only

List the local user accounts on this Mac and which of them are administrators.

check_guest_account Read-only

Report whether the macOS Guest account is enabled (lets anyone log in without a password).

screen_lock_settings Read-only

Report whether this Mac requires a password after sleep/screensaver and how soon.

check_software_updates Read-only

Report whether automatic update checking is on, when macOS last checked, and how many updates were pending at the last cached check (no live Apple call).

enable_automatic_updates Asks first

Turn ON macOS automatic updates: scheduled update checking, background download, and automatic install of macOS, security (rapid security responses), and system-data updates, plus App Store app auto-update. Needs admin. This is the only way to actually enable updates — check_software_updates only reports status.

enable_gatekeeper Asks first

Turn Gatekeeper back on — macOS's check that apps you open are signed and notarized. The fix for the attack-surface or security check reporting Gatekeeper disabled. Needs admin. Reports honestly if it is already on.

disable_guest_account Asks first

Turn off the macOS Guest login account so nobody can log into this Mac without a password. The fix for the attack-surface or guest-account check finding it enabled. Needs admin.

disable_auto_login Asks first

Turn off automatic login so this Mac asks for a password at startup instead of going straight to the desktop (also removes the stored password at /etc/kcpassword). Needs admin.

set_screen_lock Asks first

Make this Mac require a password after it sleeps or the screensaver starts, with an optional grace period in seconds (0 = lock immediately). The fix for the screen-lock check showing no password is required. Cyclone re-reads and reports honestly if it cannot confirm.