12,000+Downloads

800+Security rules

160+GitHub stars

No Command Line Required

mSCP normally runs on scripts. MACE takes that hassle away, offering the official mSCP build engine alongside its own native engine for building compliance.

New baseline

All-in-One Workflow

Create, customize, build, audit, and document baselines in one app. 800+ rules from every supported macOS, iOS, and visionOS release in NIST's macOS Security Compliance Project.

.mobileconfig

✓✓✓

MDM-Ready Exports

Deploy straight to Jamf Pro, Workspace ONE, Intune, Iru, Fleet, Addigy, and more, or build mobileconfig, plist, DDM, and signed profiles locally for any MDM.

Built for the frameworks you answer to

CIS Level 1 & 2
NIST 800-53
DISA STIG
CMMC
NIST 800-171
CIS v8
CNSSI-1253
HICP
NL MAPGOV

See every baseline on the mSCP GitHub

See MACE in Action

Main Menu

Your compliance command center

See What MACE Produces

Real output from a real build.

Audit Report

Rule-by-rule pass and fail results with pass rate, severity, and compliance mapping, ready to hand to an auditor.

HTML PDF XLSX CSV JSON Markdown AsciiDoc

Compliance Documentation

Full baseline guide with rule discussions, check procedures, and remediation steps for every control.

HTML PDF XLSX CSV JSON Markdown AsciiDoc

* Every report is fully customizable. These are the default outputs.

PlistBuddy ContentFilter killall LoggingEnabled MRT

SSHEnabled com.apple.Terminal munki nvram killall

Gatekeeper pmset chown Sidecar com.apple.dock

TouchID launchctl PlistBuddy plutil GlobalPreferences

fdesetup spctl /System/Library write kextunload

pmset Gatekeeper security ScreenSaverDelay com.apple.finder

BlockedApplications DisableGuestAccount APFS ASR InternetSharing

Sidecar RemoveApplication InternetSharing sudo Kerberos

dscl maxFailedAttempts SystemUIServer translocation kernel_task

Camera SCEP ConfigurationProfile BlockedApplications CAC

TouchID pmset write TimeMachine RequirePassword

PasswordPolicy GlobalPreferences com.apple.screensaver StealthMode idleTime

XProtect DDM MRT requireSymbol iCloud

MACE pmset PayloadContent FirewallEnabled com.apple.Terminal

pmset com.apple.security com.apple.SystemPolicy Notarization Handoff

com.apple.mail kextload PasswordPolicy ABM defaults

NIST /System/Library PlistBuddy plutil Gatekeeper

minLength BlockedApplications PlatformSSO SecureEnclave Continuity

FileSharing Bluetooth askForPassword ARDAgent sudo

com.apple.finder PayloadType mSCP Gatekeeper NIST

munki CMMC Gatekeeper plutil mSCP

defaults 800-171 sudo plutil fdesetup

jamf osascript false RequirePassword softwareupdate

AirDrop pmset requireSymbol APFS LaunchAgent

security InternetSharing BlockAllIncoming killall LoggingEnabled

MDM InstallApplication 800-53 mobileconfig allowed

AuthorizationDB SecKeychain WindowServer ApplicationFirewall com.apple.dock

RecoveryOS audit dscl osascript com.apple.finder

com.apple.loginwindow LoggingEnabled /var/db write networksetup

DFU Gatekeeper PlistBuddy sudo munki

munki xattr systemsetup RequirePassword chown

expirationDays com.apple.security CAC maxFailedAttempts com.apple.Safari

csrutil audit askForPassword DFU AppleSilicon

ditto expirationDays Rosetta com.apple.Terminal RemoteLogin

ScreenSaverDelay Gatekeeper networksetup /var/db ScreenSharing

ScreenRecording networksetup mdmclient lockoutDuration GlobalPreferences

Gatekeeper lockoutDuration Volume LoginwindowText osascript

ditto dscl Gatekeeper ScreenSaverDelay enabled

Gatekeeper PacketTunnel ditto SecureEnclave SCEP

RestrictedSoftware PayloadContent minLength ditto InstallApplication

nvram com.apple.SystemPolicy launchctl PlistBuddy askForPassword

SSO write /Library/Preferences NSGlobalDomain idleTime

com.apple.dock enabled MDM StealthMode nvram

ScreenSharing SystemPolicy munki benchmark RequirePassword

softwareupdate com.apple.loginwindow DisableGuestAccount security munki

PrivacyPreferences sandbox /var/db historyCount SecKeychain

SecureToken firmwarepasswd networksetup NSGlobalDomain sudo

Accessibility xattr com.apple.Terminal write FullDiskAccess

FullDiskAccess CIS audit mdmclient plist

PIV launchctl askForPassword MACE com.apple.Terminal

PasswordPolicy FirewallEnabled LoginItem LaunchAgent scutil

SocketFilter OTA BlockedApplications Kerberos PacketTunnel

Continuity idleTime CIS chmod read

/System/Library AuthorizationDB false read write

PlatformSSO MRT SecureToken benchmark 800-171

STIG compliant declaration pmset fdesetup

SecKeychain CAC SecureEnclave IPSW LaunchAgent

PowerNap PrinterSharing profile ditto SecureToken

minLength TimeMachine ScreenSharing Entitlements PacketTunnel

profiles 800-171 SecureBoot com.apple.Terminal ASR

Ready to Simplify Apple Compliance?

Download MACE for free and start building your security baselines today.

Download MACE Read the Docs