Cyclone Agentic AI, Cyclone AI product assistant, AI macOS Scan, malware defense, encrypted vaults, military-grade secure wiping, privacy & security, and hundreds of other tools built for macOS.
Notarized by Apple · Apple Developer ID signed
ScanIn one pass, the AI inspects the four things that decide how healthy and private your Mac really is.Disk usage and the biggest space hogsPrivacy traces left by browsers and appsMalware, adware and suspicious launch itemsMaintenance tasks that are overdueScoreEverything is distilled into one weighted 0–100 health score — the same formula the app's dashboard uses.Threats — 35% of the scorePrivacy — 30%Disk health — 20%Maintenance — 15%ExplainThe built-in AI turns raw findings into a clear, human summary — no jargon, no guessing.What's wrong, in plain EnglishRanked by real-world impactWhy each item actually mattersConfirmNothing is changed until you say so — you see exactly what will happen first.A full preview before any actionDangerous items stay report-onlyYou're always in controlSafe CleanOne tap applies the safe fixes and hands back a clear before-and-after summary.One-tap AI Safe CleanA single admin prompt for the whole runCombined summary of what changed
Powered by the Cyclone AI Agent
AI macOS Scan
One click. The Cyclone AI Agent scans disk, privacy, threats and maintenance, turns it into a single 0–100 health score, and explains in plain English exactly what to fix — then, with your approval, safely cleans the rest for you.
One click — no settings, no jargon to wade through.
A 0–100 health score with clear, prioritized recommendations.
Optional AI Safe Clean fixes the safe stuff automatically.
Is my Mac safe?I scanned and audited 4 areas — disk, privacy, threats and maintenance. Your health score is 96/100. One thing worth fixing: 3 apps and an AI agent can read your screen. Want me to fix it? I'll ask before changing anything.Should I worry about this login item?Let me reason it through: it's unsigned, runs at every boot, and hides in a dotfolder — three red flags. On balance I'd quarantine it — the Agent can do that with your approval, and undo it any time if it turns out to be wanted.Audit my Mac.On it — the Agent checked disk, privacy, threats and maintenance. Health is 96/100. 3 apps and 1 AI agent can read your screen, and one launch item looks risky. Want the Agent to fix them? It'll ask first.What does “crypto shred” mean?It destroys the encryption key instead of overwriting every byte — so the data becomes unreadable instantly, even on SSDs where plain overwriting isn't reliable.What should I fix first?Top priority: revoke screen access from 2 apps you never use. Then clear ~1.2 GB of caches and switch the firewall on. The Agent can apply the safe ones once you approve.Explain my privacy score in Spanish.I'm selling an external drive — make it unrecoverable.That's Full Drive Wipe: it destroys every byte on the drive, not just the files you can see, so nothing is recoverable — even with forensic tools. Want me to hand you to the Agent? It'll double-check it's the right drive (never your Mac's own disk) and set up the wipe — nothing is touched until you confirm.How do I keep some files completely private?Create a Vault — an AES-256 encrypted container that opens like a normal folder when unlocked and holds only unreadable ciphertext when closed. You can even hide one inside an ordinary folder, and there are deniable options that don't reveal they exist at all.Which erase method should I actually use?For most people, one secure pass of random data is plenty on a modern drive. The multi-pass military standards (DoD, Gutmann) exist for the truly paranoid — slower, but Cyclone supports them all. I'd pick based on how sensitive the data is; happy to explain any of the 5 methods.What does Cyclone cost?One simple price: $37 a year for everything — all tools, the AI, and updates. No tiers, no add-ons. And you get a 7-day free trial with full access first, so you can see it work on your own Mac before paying a cent.Replay
Cyclone AI product assistant
An expert AI, built into your Mac
Cyclone has its AI baked in, behind one front door. Ask Cyclone Help anything — it answers your questions and explains any result in plain English. When you want something done, it hands off to the Cyclone AI Agent, which can audit your Mac, run scans and apply fixes — always asking your approval before it changes anything.
Try a topic:
Cyclone Application Help
Pick a topic, or tap “Ask Cyclone” ↓
Am I being hacked?Scanned your networkChecked remote-access doorsChecked admin accounts & recent sign-insGood news — nothing suspicious. No remote-access doors are open, there's one admin account (you), and no sign-ins you wouldn't expect. I did notice 3 apps that can read your screen — want me to take you there to review them?What is device .199 on my Wi-Fi?Scanned the LANProbed ports on .199Looked up the hardware vendorIt's almost certainly a smart-home gadget. The chip vendor is Espressif and it has no open ports — the classic fingerprint of a cloud-connected smart plug or sensor, not a computer. It's new to your network; want me to mark it known, or flag it?Free up space safely.Scanned caches, logs & temp filesChecked what's safe to removeI found 3.2 GB of caches and logs that are safe to clear — nothing personal, just rebuildable junk.Clean 3.2 GB of caches & logs?Is my Mac locked down?Checked FileVault, Firewall, Gatekeeper & SIPChecked automatic updatesMostly solid — your disk is encrypted, Gatekeeper and System Integrity Protection are on, and updates are automatic. One gap: the firewall is off. Want me to take you there to switch it on?Is this SD card genuine?Inspected the drive's claimed capacity & vendorIt shows two classic counterfeit red flags — a very large claimed size on a no-name removable device. That isn't proof, so I can run a full write-and-verify test (it only uses free space and never touches your files). Run it?Run the counterfeit write-verify test?Are my backups working?Checked Time Machine statusRead the latest backup & local snapshotsChecked the backup diskYou're covered — your last Time Machine backup finished about 2 hours ago and the backup disk is healthy. You also have 18 local snapshots on the internal disk for quick file recovery. Want me to start a fresh backup right now to be safe?Something feels off — scan for malware.Scanned launch agents & login itemsChecked running processesVerified code signaturesI found one real problem: a hidden launch agent that isn't signed by any known developer and restarts itself at every login — classic adware behaviour. Everything else checks out clean.Quarantine the suspicious launch agent?Which apps can see my screen or hear me?Read your privacy permissionsVerified each app's publisherTwo apps can record your screen and three can use the microphone. All but one cryptographically verified their publisher — one screen recorder is unsigned, which is unusual. Want me to take you straight to the right Settings pane to review it?I'm stepping away — watch my Mac.Started the intrusion monitorTook a baseline of doors, admins & devicesOn watch. I'll re-check your remote-access doors, admin accounts and network every 30 seconds and flag anything new the moment it appears. Just tell me when you're back.Is this invoice PDF safe to open?Inspected the PDF's internalsChecked for scripts & auto-run actionsCareful — it contains embedded JavaScript and an auto-run action that fires the moment it opens. I can write you a verified clean copy with all active content removed, right next to the original — your file stays untouched.Create a verified clean copy of the PDF?Why is my Mac so slow today?Checked memory pressure & CPU loadListed the heaviest apps & processesYour memory is under pressure — a browser with 60+ tabs is holding most of it, and a video app you're not using is quietly eating a whole CPU core in the background. Quitting those two would speed things up immediately.Quit the background video app?Needs your OKCancelApproveworking…Replay
Cyclone AI Agent
Pick a task, or tap “Ask the Agent” ↓
Cyclone Agentic AI
An AI that does the work — not just talks
The Cyclone AI Agent is a tool-using expert that investigates, reasons across every corner of your Mac, and actually runs the right tools to get answers — identifying mystery Wi-Fi devices, hunting malware, standing watch for intruders, auditing your privacy, checking your Time Machine backups, freeing space, spotting counterfeit drives, and answering deep questions about macOS itself. It chains steps together on its own, explains what it found in plain English, and always asks your approval before it changes anything.
It’s the difference between an assistant that tells you what to do and one that does it for you — safely. No jargon, no twenty-tab investigation, no wrong button pressed by mistake. Just ask, and a security expert goes to work on your Mac.
Private by design — powered by Cyclone’s own self-hosted AI, never a third-party service. Try a task:
How Cyclone Agentic AI works
Understand → investigate → reason → ask → act
On every request the Agent runs the same disciplined loop a careful expert would — gathering real evidence before it forms a verdict, and pausing for your approval before it ever changes a thing.
1
Understands
Reads your request in plain language — in any of 59 languages — and works out what you really want.
2
Investigates
Picks and runs the right tools from its kit of 307 — scanning your network, disk, privacy, backups and threats to gather real facts.
3
Reasons
Chains steps together on its own, weighs what it found, and forms a verdict instead of guessing.
4
Asks first
Anything that changes your Mac is held behind an Approve card — nothing happens without your explicit OK.
5
Acts & explains
Carries out what you approved and tells you, in plain English, exactly what it did and what it means.
What it can do for you
Identify mystery Wi-Fi devices
Hunt malware & adware
Audit your privacy & exposure
Safely free up disk space
Spot counterfeit drives
Check your lock-down posture
Watch for intruders(checks every 30 s)
Check & restore your backups
Shred files beyond recovery
Lock down your encrypted vaults
Strip GPS & metadata from photos
Scrub hidden data from PDFs
Recover recently deleted files
Fully remove apps & leftovers
Answer deep macOS questions
Verify who made an app
Check if a download is safe
Close remote-access doors
Private by design — it runs on Cyclone’s own self-hosted AI, never a third-party service like OpenAI or Anthropic.
AI AgentThe Cyclone AI Agent — your tool-using expert. It investigates, reasons across your whole Mac and runs the right tools for you, always asking before it changes anything.HomeYour security cockpit — a live system health score, AI scan, and the animated cyclone dashboard.Free SpaceWipe free disk space so files you deleted long ago can never be recovered.FilesSecurely shred specific files & folders with multi-pass overwrite and filename scrambling.WipeDestroy an entire external or removable drive, beyond any recovery.VaultEncrypted file, drive & folder vaults — including hidden, deniable stealth volumes.File VaultsCreate encrypted virtual file vaults — portable, disguisable, with optional hidden volumes.Encrypted virtual drives stored as ordinary files — create, mount and lock them on demand.AES-128 / AES-256 encrypted vault images that mount and behave like a normal drive.Disguise a vault as another file type and store it anywhere — external drives included.An optional hidden inner volume opens only with its own second password.Your password lives in encrypted memory for the session only — never on disk or in your Keychain.Drive VaultsEncrypt whole external drives — standard AES-256 vaults or deniable stealth volumes.Turn a whole external drive into an encrypted vault — standard APFS, or a deniable stealth volume that reads as random noise.Standard vaults: AES-256 encrypted APFS volumes that unlock with a password.Stealth vaults have no visible header — the drive reads as random noise, and nothing reveals a vault exists without the password.An optional hidden volume inside a stealth drive opens only with its own second password.Your boot volume is always blocked — only external and removable drives can become vaults.Folder VaultsEncrypt a folder in place — open it's a normal folder, locked it holds only ciphertext.
Touch ID optional.Encrypt a folder in place — open, it's a normal folder you work in; locked, it holds only ciphertext.The encrypted store hides inside the folder itself — a locked vault is one portable unit you can move, copy or back up.Unlock with your password, or opt in to Touch ID on this Mac — the typed password always works.An optional hidden inner volume opens with its own second password.The Deniable Folder Vault variant takes two passwords — a decoy and a real one — with nothing on disk revealing the second exists.SystemA whole toolkit — hover to see what's inside.ExposureFind & close the open doors on your Mac — one read-only scan with an exposure score.DisksManage disks & partitions — First Aid, format, image and restore.RecoverUndelete and recover files you removed by mistake.FirewallMonitor and block inbound and outbound network connections.NetworkClear the traces your network connections leave behind.StartupSee and control everything that launches at login or boot.AppsRemove apps and every file they leave behind.DupesFind true duplicates by hash and reclaim the space.LargeSpot the biggest space hogs on your disk.CloneBit-for-bit or filesystem-aware drive cloning, verified.DirMapA sunburst chart of where your disk space goes.ForensicAudit your Mac for hidden-volume leaks and artifacts.LANMonitorSee who can reach your Mac and every device on your Wi-Fi/LAN, with anomaly alerts.SystemInfoA live, plain-English health dashboard for your Mac — memory, CPU, disk, network and battery at a glance.File SharingThe safe way to share — and close — a folder on your local network.CleanReclaim space — caches, logs, temp files & junk, plus one-tap maintenance tasks.PrivacyA 0–100 privacy score with one-click fixes for the traces apps leave behind.MalwareScan for macOS malware & adware and quarantine anything suspicious.PermissionsSee exactly what AI agents, browser extensions & apps can access on your Mac.ToolsPower tools — hover to see what's inside.PhotosBrowse, inspect, edit and clean your photos — folders, iCloud Drive and Apple Photos.PDFInspect a PDF's hidden risks — then strip, sanitize or truly redact a clean copy.MetaStrip EXIF, GPS and hidden metadata from photos and PDFs.HexInspect the raw bytes of any file or drive sector.SearchFind any word or pattern inside every file, fast.SettingsLanguage, preferences, your license, support — and your encrypted activity history.AboutVersion, license and build info — everything about your copy of Cyclone.SupportHelp & support — ask a question or send the Cyclone team a support request.PreferencesApp preferences — appearance, privacy, protection and Fingerprint Access.Self-CheckProve Cyclone's own protections actually work — a one-tap integrity check.HistoryYour optional, encrypted log of everything Cyclone has done — off by default.UpdatesCheck for updates — signed, verified new versions installed in one click.
Explore the cockpit ↓
One cockpit, everything secure.
Hover and click on an icon to see what it does · Vault, System, Tools & Settings expand · click any icon to open its details
Vault
System
Tools
Settings
AI Agent — The Cyclone AI Agent — your tool-using expert. It investigates, reasons across your whole Mac and runs the right tools for you, always asking before it changes anything.
Five erase methods: Zero Fill, Random Data, DoD 3-pass, DoD 7-pass, or Gutmann 35-pass.Works on internal and external volumes, including FAT32 and ExFAT drives.Post-erase verification confirms the data was actually overwritten.On SSDs a single random pass is equally effective due to wear levelling — extra passes only add write wear.Drag and drop files, or browse to select items for secure deletion.Each file is overwritten with your chosen pattern, then its name is scrambled before removal.Generates an optional shred certificate PDF as proof of destruction.Shredded files cannot be recovered by any means — double-check your selection first.Only external and removable volumes are eligible — your boot drive is protected.Pick an erase method and type the volume name to confirm the destructive action.Ideal for decommissioning USB drives, SD cards and external hard drives.This operation is irreversible — all data on the selected drive is permanently destroyed.Strips EXIF, GPS, IPTC and TIFF metadata from photos.Removes author, creator and producer fields from PDF documents.Shows every metadata field a file exposes — including its Finder tags — so you know exactly what it reveals.Stripping is lossless for images — pixel data is never re-encoded or degraded.Inspects a PDF's hidden risks: identifying metadata, embedded JavaScript, auto-open actions, embedded files, external links and weak encryption.Strip metadata, sanitize active content, or truly redact — redacted pages are re-rendered so the text underneath is physically gone.Password-protect, remove passwords, merge and split — every operation re-verifies its result before reporting success.Your original file is never touched — every fix is saved as a clean copy next to it.Password-protected file and drive vaults with AES-128 or AES-256 encryption.Deniable stealth volumes show only random noise — no header reveals them without the password.Mount and unmount on demand; a second hidden volume opens only with its own password.Mount APFS / Time Machine local snapshots to browse and restore files with full names.Scan FAT32 / ExFAT external drives for deleted directory entries.Deep-scan any drive for recoverable file signatures (JPEG, PDF, PNG, MP4 and more).Internal SSDs use TRIM, which erases data quickly — snapshot recovery has the best success rate there.Metadata & keychain scans catch plaintext flags or service names that expose hidden volumes.Entropy analysis verifies vault containers show the high entropy expected of encrypted data.Cross-feature exposure check flags whether logs, Spotlight or mounted vaults leak hidden content.Detects AI agents like Claude, ChatGPT and Cursor and lists the MCP tools and folders they can use.Reads each browser extension's manifest to show what it can see and change on the sites you visit.Enumerates macOS grants per app — Screen Recording, Full Disk Access, Accessibility, Camera, Mic.Everything is ranked by sensitivity with a plain-English explanation of what each grant allows.Cyclone Fortress can't switch a permission off (macOS reserves that) — every item links you to the right place to manage it. Reading system permissions needs Full Disk Access.Checks the doors intruders actually use: File Sharing, SSH, Screen Sharing, Remote Management, firewall off, FileVault, Gatekeeper, System Integrity Protection, the Guest account and auto-login.A 0–100 exposure score and an open-door count show how reachable your Mac is at a glance.Every finding explains what it means in plain English and offers a Fix action to close that door.The scan only reads your settings — it changes nothing. Closing a door is always your choice.Live per-app usage shows each app's incoming and outgoing data.Turn on the built-in macOS firewall, enable stealth mode, or block all incoming connections.Toggle an app off to block its incoming connections, or block a domain / IP for the whole Mac.Per-app outbound blocking needs a system extension and isn't available to a notarized app. Changing firewall settings needs an admin password.Covers DNS cache, ARP cache, saved Wi-Fi networks, recently connected servers and SSH known hosts.Each category shows how many cached entries exist before you decide to clean.Includes a Security Audit and a radial Network Map of what's connected.Flushing the DNS and ARP caches requires admin privileges.Scan devices lists everything on your network — router, phones, smart-home gear, cameras, plugs — with each device's maker identified offline from a built-in 39,000-entry vendor database (no internet lookup).The first scan sets your known baseline; afterwards any new device, a remote-access door that opens (SSH / Screen Sharing / Remote Management) or a new admin account is flagged as an alert. Mark devices known or give them custom names.A built-in plain-English assistant answers “Am I being hacked?”, “Is this normal?” and “What should I do?” — every answer computed on your Mac.A periodic snapshot + anomaly log, not a real-time intrusion-detection system (live per-connection monitoring needs a system extension). The optional saved history is encrypted, locked to your Mac, and off by default.Each card gives a one-line verdict — healthy, worth a look, or a real problem — with a colour dot, so you don't have to interpret raw numbers.Memory and CPU refresh live while the panel is open; tap either card to see exactly which apps are using the most, so you can quit a resource hog.Reads the same on-device telemetry the Cyclone AI Agent uses, so the panel and the AI always agree — and any reading can be handed to the Agent to explain or investigate further.Free and read-only — nothing here changes your Mac, and nothing about your Mac is sent anywhere.Shows every folder shared over the network (SMB) at a glance — and who can reach it.Password-less guest shares are flagged in red; new shares default to the safest settings.A one-tap “Stop all sharing” closes every open share the moment you're done.An open share is a door on your network — Cyclone makes it obvious and easy to close. Changing sharing settings needs an admin password.Scans user LaunchAgents, system LaunchAgents and system LaunchDaemons.Trust badges flag Apple, known third-party and unknown items at a glance.Enable, disable or securely remove startup items — admin required for system-level entries.Apple system items (com.apple.*) are protected and cannot be removed.15 weighted checks: clipboard, browser data, caches, startup items, network traces, recent files, trash, logs, downloads and metadata.Each check is weighted by privacy impact and feeds a single composite gauge score.Seven checks are one-click fixable; the other eight come with guided tips and cross-links.Quick scan covers signatures, launch agents, browser extensions, cron jobs, kernel extensions and more.Deep scan adds a SHA-256 hash database, a YARA rule engine and cloud intelligence.Detected threats can be quarantined or securely shredded; safe items can be excluded from future scans.Cyclone's own threat intelligence is built in; third-party threat feeds are opt-in and use your own API keys. Quick Scan uses no cloud layer at all.Covers Safari, Chrome, Firefox, Edge, Brave, Arc, Opera, Vivaldi and 8+ package managers.Deep Scan mode (admin) unlocks system-protected areas for a thorough clean.One-tap maintenance tasks (10 on Apple Silicon, 11 on Intel) plus a malicious-cookie scanner, with post-clean verification.Some items are report-only and cannot be deleted (e.g. keychains, the TCC database).Scans for app bundles, caches, preferences, containers and support files.Shows the total reclaimable space per application before you uninstall.Associated files are securely shredded, not just moved to Trash.Three-phase scan: enumerate files, group by size, then verify with a cryptographic hash.Select All keeps the oldest copy of each duplicate and marks the rest for shredding.Works across any folder you choose — home directory, external drives or specific paths.Five size buckets: over 1 GB, 500 MB, 100 MB, 50 MB and 10 MB.An interactive 3D bubble treemap helps you spot and select the biggest files.Selected files can be securely shredded directly from the results.First Aid verifies and repairs filesystem errors on any volume.Format disks as APFS, HFS+, FAT32 or ExFAT with GPT or MBR schemes.Manage APFS volumes, merge partitions and clone or image volumes for backup.Boot-disk operations are limited to verification — destructive actions require a non-boot disk.Bit-for-bit mode (dd) makes a forensic-identical copy, including free space.Smart mode (ASR) is filesystem-aware and skips unused blocks for faster transfers.Post-clone SHA-256 spot-check confirms the clone matches the original.The destination drive is fully erased during cloning, and your boot drive can't be a destination.Interactive concentric rings — each ring is one depth level of the directory tree.Click any segment to drill into that folder and see its children.Toggle between the sunburst chart and an indented tree list; works on any mounted volume.Layer 1 — Spotlight: instant results from macOS-indexed text, code, PDFs and documents.Layer 2 — File Scan: memory-mapped I/O with 8 concurrent workers sweeps unindexed files at high speed.Plain text, case-sensitive and full regex; click any result to reveal it in Finder.Binary files and heavy directories (.git, node_modules) are skipped to keep scans fast.View any file or drive sector as hex + ASCII, with memory-safe paged reads (64 KB–1 MB).Search for hex patterns (e.g. FF D8 FF) or ASCII strings within the loaded page.Real-time entropy analysis and file-signature detection for 15+ formats.Reading raw drive sectors requires administrator privileges.Browse local folders, iCloud Drive (files download on demand) and your Apple Photos library in one thumbnail wall, with a full-screen lightbox and rich sort & filter.The Info panel shows every EXIF and GPS field a photo exposes — strip them in one tap; edit non-destructively (crop, rotate, adjust) and batch resize or convert.Find exact duplicates by hash, organize with encrypted tags & categories, and run AI Pic Diagnostics on any image.Secure delete and in-place metadata stripping apply to real files. Apple Photos assets are managed through the Photos library — deletes go to its Recently Deleted, not a secure wipe.A weighted composite of disk, privacy, threat and maintenance health, shown 0–100.Run a full scan to check caches, startup items, network traces and threats at once.AI turns the results into a plain-English summary and clear recommendations.Ask questions in plain language and get answers from Cyclone's product knowledge base — it explains features, results and how-tos.Multi-turn chat with built-in automatic translation, so you can ask in your own language.Question-and-answer only: when you want something done, it hands off to the Cyclone AI Agent, which always asks approval before making changes.Records 18+ operation types: erasure, deletion, scans, clones, vault creation, cleanup and more.Encrypted at rest with AES-256-CBC, a fresh random IV per save, and a key bound to your Mac's hardware.Secure-wipe overwrites stored data with random bytes before deletion; useless on any other Mac.Activity logs are disabled by default — enable them in Preferences. Your data never leaves the machine.Really shreds a temporary file and verifies it's gone — proof secure deletion works.Round-trips AES encryption and confirms a wrong key or tampered data is rejected.Confirms your startup disk is identified and protected, and path-traversal tricks are refused.Checks threat signatures are loaded and fresh, and that the app's own code signature is intact.Checks that need extra access (admin, network, Full Disk Access) skip gracefully and say why.A radial mini cockpit: your live 0–100 health score at the center of the menu-bar hub.One-click satellite buttons: run an AI Scan, update threat signatures, or open the full app.Signature freshness shown inline, so you always know your protection is current.Built-in knowledge of macOS paths answers instantly — even fully offline.For unfamiliar files, Cyclone's self-hosted AI adds a deeper plain-English analysis.Tells you what the item does, what happens if you delete it, and how risky that is.Like all Cyclone AI, explanations come from Cyclone's own servers — never a third-party AI service.Pick your language on first launch or switch anytime in Preferences — the interface follows instantly.59 languages spanning every major script — Spanish, Chinese, Arabic, Hindi, Japanese and many more.Cyclone Help chat auto-translates too, so you can ask questions and read answers in your own language.The app ships in English today — the other 58 languages are rolling out as their translations are completed.Select VolumePick the internal or external volume whose already-deleted data you want to overwrite.Internal or externalFAT32 and ExFATChoose MethodChoose one of five erase methods for the overwrite pass.Zero Fill or RandomDoD 3- and 7-passGutmann 35-passOverwriteCyclone Fortress writes over the free space so deleted files can't be recovered.Overwrites free spaceDeleted data onlyVerifyA post-erase verification report confirms the data was actually overwritten.Verification reportConfirms overwriteAdd FilesDrag in files or folders, or browse to select the items you want destroyed.Drag and dropOr browse to selectEach file is overwritten with your chosen pattern before removal.Chosen patternPer-file overwriteScrambleThe filename is scrambled, then the file is deleted.Scramble nameThen deleteCertifyOptionally generate a shred certificate PDF as proof of destruction.Optional PDFProof of destructionSelect DriveChoose an eligible external or removable volume — your boot drive is protected and can't be selected.External or removableBoot drive protectedPick the erase method to use across the whole drive.Pick erase methodWhole driveConfirmType the volume name to confirm this irreversible, destructive action.Type volume nameIrreversibleDestroyEverything on the drive is permanently destroyed — ideal for decommissioning USB drives, SD cards and external hard drives.Permanent eraseDecommission mediaSelect the photos, PDFs or other files whose metadata you want removed.Photos and PDFsAny fileStrip PhotosEXIF, GPS, IPTC and TIFF metadata is removed from photos, losslessly.EXIF, GPS, IPTC, TIFFLossless — no re-encodeClean PDFsAuthor, creator and producer fields are removed from PDF documents.Author and creatorProducer fieldsReviewEvery metadata field found — including Finder tags — is listed, so you see exactly what each file was revealing.All fields listedFinder tags shownCreate VaultCreate a password-protected file or drive vault with AES-128 or AES-256 encryption.File or drive vaultAES-128 or AES-256Stealth OptionAdd a deniable stealth volume that shows only random noise, with no header to reveal it.Looks like noiseNo visible headerMountMount and unmount the vault on demand using its password.On demandPassword to openHidden VolumeA second hidden volume opens only with its own separate password.Second passwordHidden volumeSnapshotsMount APFS or Time Machine local snapshots to browse and restore files with their full names.APFS / Time MachineFull file namesDirectory ScanFAT32 / ExFATDeleted entriesSignature CarveDeep-scan any drive for recoverable file signatures like JPEG, PDF, PNG and MP4.Deep scanJPEG, PDF, PNG, MP4RestoreRecover the files you find — snapshot recovery has the best success rate on TRIM-enabled internal SSDs.Recover filesSnapshots best on SSDMetadata ScanMetadata and keychain scans catch plaintext flags or service names that could expose hidden volumes.Metadata and keychainPlaintext flagsEntropy CheckHigh entropyEncrypted-data checkExposure CheckA cross-feature check flags whether logs, Spotlight or mounted vaults leak hidden content.Logs and SpotlightMounted vaultsThe scan confirms your privacy holds up against hidden-volume leaks, encryption artifacts and metadata.Privacy verifiedLeaks surfacedDetect AgentsClaude, ChatGPT, CursorMCP tools and foldersRead ExtensionsExtension manifestsWhat it can changeEnumerate GrantsEnumerates macOS grants per app — Screen Recording, Full Disk Access, Accessibility, Camera and Mic.Per-app grantsScreen, disk, camera, micRank & ExplainEverything is ranked by sensitivity with a plain-English explanation, linking you to the right place to manage it.Ranked by sensitivityLinks to manageLive UsagePer-app trafficIncoming and outgoingTurn OnmacOS firewallStealth modeBlockToggle an app off to block its incoming connections, or block a domain or IP for the whole Mac.Block per appBlock domain or IPApplyChanges take effect after an admin password — firewall settings require it.Admin passwordSettings appliedScan TracesScans for the traces your connections leave behind across several categories.DNS and ARPWi-Fi, servers, SSHReview CountsEntry countsPer categoryClearClear DNS and ARP caches, saved Wi-Fi networks, recently connected servers and SSH known hosts.Clears cachesAdmin for DNS/ARPAuditA Security Audit and a radial Network Map show what's connected — every IP and server your Mac is talking to.Security AuditNetwork MapConnected IPsScanUser and systemAgents and daemonsTrust BadgesApple vs third-partyUnknown flaggedDecideChoose which items you don't want starting at login or boot.Login or bootPick itemsEnable, disable or securely remove startup items — admin is required for system-level entries, and Apple items are protected.Enable or removeApple items protectedRun ChecksRuns 15 weighted checks across clipboard, browser data, caches, startup items, network traces and more.15 weighted checksClipboard to logsWeightEach check is weighted by its privacy impact.By privacy impactPer checkScoreThe weighted checks feed a single composite gauge score from 0 to 100.0-100 gaugeComposite scoreFix7 one-click fixes8 guided tipsPath ScanScans high-risk locations — signatures, launch agents, browser extensions, cron jobs, kernel extensions and more.High-risk pathsLaunch agents, cronHash DatabaseDeep scan checks suspect files against a SHA-256 hash database of known threats.SHA-256 hashesKnown threatsRule EngineA YARA rule engine matches malicious patterns against file contents.YARA rulesPattern matchCloud IntelAdds Cyclone's built-in threat intelligence, plus optional third-party feeds that are opt-in and use your own API keys.Built-in Cyclone intelThird-party opt-inQuarantineQuarantine or shredExclude safe itemsSweeps 20 categories of junk — browser data, caches, logs, cookies and developer artifacts.20 categoriesBrowsers and cachesDeep ScanDeep Scan mode unlocks system-protected areas with an admin password for a thorough clean.System areasCleanCleans the selected categories, with safe report-only handling for risky areas like keychains and the TCC database.Report-only safetyRisky areas protectedMaintainRun the one-tap maintenance tasks (10 on Apple Silicon, 11 on Intel) plus a malicious-cookie scanner, with post-clean verification.One-tap maintenancePost-clean verifyScans for an app's bundle, caches, preferences, containers and support files.App bundleCaches and prefsReclaimable spacePer applicationShredSecurely shreddedNot just trashedThe app and every file it left behind are removed together.App plus leftoversRemoved togetherEnumeratePhase one enumerates the files across any folder or drive you choose.Any folderHome or externalGroupPhase two groups candidate files by size.Group by sizeNarrow candidatesHashPhase three verifies true duplicates with a SHA-256 cryptographic hash, not just the name.SHA-256 verifyNot by nameKeep oldestShred the restScans for space hogs over 10 MB across the location you choose.Over 10 MBSpace hogsBucketGroups results into five size buckets: over 1 GB, 500 MB, 100 MB, 50 MB and 10 MB.Five buckets1 GB down to 10 MBVisualize3D treemapSpot the biggestSelect filesShred from resultsFirst AidVerify and repairAny volumeFormatAPFS, HFS+, FAT32, ExFATGPT or MBRPartitionManage APFS volumes and merge partitions.APFS volumesMerge partitionsImageClone or image volumes for backup — boot-disk operations are limited to verification.Clone or imageBoot disk verify-onlyChoose ModePick bit-for-bit mode (dd) for a forensic-identical copy, or Smart mode (ASR) for faster transfers.dd or ASRForensic or fastSet TargetChoose the destination drive — it's fully erased during cloning and can't be your boot drive.Destination erasedNot the boot driveCloneBit-for-bit copies everything including free space; Smart mode is filesystem-aware and skips unused blocks.dd copies allASR skips unusedA post-clone SHA-256 spot-check confirms the clone matches the original.SHA-256 spot-checkMatches originalScans where your space goes on any mounted volume.Space usageRenderDraws interactive concentric rings, where each ring is one depth level of the directory tree.Concentric ringsOne ring per levelDrill DownClick to drillSee childrenSwitch ViewToggle between the sunburst chart and an indented tree list.Sunburst or treeIndented listSpotlightLayer one returns instant results from macOS-indexed text, code, PDFs and documents.Indexed resultsInstantFile ScanLayer two uses memory-mapped I/O with 8 concurrent workers to sweep unindexed files at high speed.Memory-mapped I/O8 concurrent workersMatchSearch with plain text, case-sensitive matching or full regex, skipping binary files and heavy directories.Text or regexSkips .git, node_modulesRevealClick any result to reveal it in Finder.Click a resultReveal in FinderOpenOpen any file or drive sector — raw sector reads require administrator privileges.File or sectorAdmin for sectorsViewView the bytes as hex plus ASCII with memory-safe paged reads from 64 KB to 1 MB.Hex and ASCIIPaged readsSearchSearch for hex patterns like FF D8 FF or ASCII strings within the loaded page.Hex patternsASCII stringsAnalyzeReal-time entropy analysis and file-signature detection identify 15+ formats.Entropy analysis15+ signaturesOne click runs a full scan of caches, startup items, network traces and threats at once.One clickFull scanDisk, privacy, threat and maintenance health are combined into a weighted composite.Four health areasWeighted compositeThe composite is shown as a single 0-100 score for your Mac.0-100 scoreSingle numberAdvisePlain-English summaryClear adviceAskAsk anything about your Mac's privacy and security in plain language.Plain languagePrivacy and securityAnswerCyclone Help answers your question from its product knowledge base — explaining features, results and how-tos.Knowledge baseExplains, doesn't actTranslateMulti-turn chat includes built-in automatic translation, so you can ask in your own language.Multi-turn chatAuto-translateHand offWhen you want something done, Cyclone Help hands off to the Cyclone AI Agent, which asks approval before making any change.Hands off to the AgentApproval before actingEnableActivity history is off by default — enable it in Preferences to start logging.Off by defaultEnable in PreferencesRecord18+ operationsErasure to cleanupEncryptStored at rest with AES-256-CBC, a fresh random IV per save, and a key bound to your Mac's hardware.AES-256-CBCHardware-bound keyWipeSecure-wipe overwrites stored data with random bytes before deletion, and your data never leaves the machine.Overwrite then deleteStays on your MacRead Your MacCyclone reads your Mac's hardware, security, network, memory, storage, battery, CPU and display — all on-device.Entirely on-deviceSame telemetry as the AILive ReadingsMemory and CPU are the fast-movers, so those cards refresh every few seconds while the panel is open.Refreshes liveNothing sent anywherePlain-English VerdictEach card gives a one-line verdict — healthy, worth a look, or a real problem — with a colour dot.No raw numbers to decodeColour-coded healthTap to Dig InTap the Memory or CPU card to see exactly which apps are using the most, so you can quit a resource hog.Per-app breakdownSpot resource hogsAsk the AgentHand any reading to the Cyclone AI Agent — it can explain it, investigate further, and act with your approval.Plain-English answersApproval-gated actions
Security you don't have to think about
Every feature is built so privacy is the default state — nothing to configure, nothing to trust us with. Tap any tool to see what it does.
Cyclone Fortress has no cloud sync — every operation runs locally. Your vault passwords live in encrypted memory for the session only, never written to disk or your Keychain. Optional online features can be turned off entirely.
No cloud sync — all wiping, scanning and encryption runs locally on your Mac.
Vault passwords stay in encrypted memory for the session only — never saved to disk.
Erasure follows DoD and Gutmann standards, with a post-wipe verification report.
The core works fully offline; cloud malware intel and the AI features (Cyclone Help and the AI Agent) are optional.
Frequently asked questions
Is Cyclone Fortress on the Mac App Store?+
No. Cyclone Fortress needs low-level disk access the App Store sandbox doesn't allow, so it's a notarized direct download, signed with an Apple Developer ID.
How much does it cost?+
A 7-day free trial with full access, then $37 for a 12-month license. After that, an optional $37/year renewal keeps product updates and fresh malware signatures coming — you can opt out anytime and there's no auto-charging surprise.
What do I need to run it?+
A Mac on macOS 13 (Ventura) or later.
Can deleted files really not be recovered?+
Correct — when you securely erase a file with Cyclone Fortress (rather than just moving it to the Trash), the data is overwritten using industry-standard methods (DoD 5220.22-M and Gutmann) and the result is verified, so it can't be recovered by us, by you, or by any recovery tool. One nuance: on solid-state drives, wear-levelling and TRIM mean macOS decides where data physically lives, so plain overwriting is less certain. For the strongest guarantee on an SSD, keep sensitive files inside an encrypted vault and use crypto shred — it discards the encryption key, making the data unreadable instantly no matter where it sits.
Does the AI send my data to OpenAI or another AI company?+
Never. Every AI feature in Cyclone — the Help assistant, the Agent, file explanations, image diagnostics — runs on Cyclone's own self-hosted servers. Nothing about you or your Mac is ever sent to OpenAI, Anthropic, Google or any third-party AI service, your questions are never used to train anything, and Cyclone writes no logs to disk. There's also a master switch that cuts all server communication entirely — the built-in offline knowledge base keeps answering common questions even then.
What can the AI Agent actually do?+
It does real work, not just chat. The Agent has 307 built-in tools it can run for you: scanning your network and identifying unknown devices, hunting malware, auditing privacy permissions, checking Time Machine backups, freeing disk space, spotting counterfeit drives, inspecting suspicious PDFs, standing watch for intruders, and much more. It chains steps together on its own like a security expert would — but anything that would change your Mac is always held behind an Approve card until you say yes.
How does the malware protection work?+
In layers. A quick scan checks the places malware actually hides — launch agents, login items, browser extensions, cron jobs and more — and cryptographically verifies code signatures so legitimate signed software isn't flagged. A deep scan adds a database of millions of known-malicious signatures, a rule engine that includes Apple's own XProtect rules, and optional cloud intelligence. Threats are quarantined only with your approval, and quarantine is reversible — you can restore anything that turns out to be wanted.
Can I hide files so nobody can tell they're even there?+
Yes. Beyond standard AES-256 encrypted vaults, Cyclone offers deniable vaults: their contents are indistinguishable from random data, with no visible signature announcing a vault exists — and a Folder Vault simply looks like an ordinary folder that opens to your files with a password. Some vaults support a second hidden layer behind a separate password. Vault passwords live only in volatile memory while the app runs — Cyclone never writes them to disk, with one opt-in exception: if you enable Touch ID unlock for a vault, its password is kept in your Mac's protected login keychain, on that Mac only.
Take back control of your Mac.
Try Cyclone Fortress free for 7 days, then $37 for a 12-month license.
Renew each year to keep product updates and the latest malware signatures.
Renewal is optional and you can opt out anytime.
Coming soonDownload for macOS
Notarized by AppleApple Developer ID signedRuns 100% on your Mac
Every download is scanned by Apple and cryptographically signed with an Apple Developer ID — so macOS verifies it's genuine and untampered before it ever runs.