Skip to main content
/System/Library profiles askForPassword pmset ScreenSaverDelay
ScreenSharing NSGlobalDomain Gatekeeper enabled APFS
firmwarepasswd RemoteLogin sudo plutil /Library/Preferences
requireAlphanumeric pmset mSCP launchctl com.apple.SystemPolicy
SecKeychain sudo PlistBuddy Entitlements /var/db
FileSharing compliant DisableGuestAccount com.apple.mail firmwarepasswd
Rosetta TimeMachine requireSymbol PasswordPolicy kernel_task
TimeMachine SecKeychain FileSharing Hardened Runtime PowerNap
com.apple.security PlatformSSO requireSymbol TCC NIST
payload Bootstrap mobileconfig ASM Accessibility
UniversalControl VPP firmwarepasswd SystemUIServer systemsetup
enabled SIP RequirePassword sudo STIG
spctl csrutil com.apple.Safari CryptoTokenKit Gatekeeper
defaults ASR SystemPolicy MCX sudo
AuthorizationRight ABM PayloadType /Library/Preferences SCEP
LoginItem SecKeychain ARDAgent FirewallEnabled requireSymbol
OAuth com.apple.dock RestrictedSoftware DEP SecKeychain
OAuth com.apple.SystemPolicy xattr PayloadUUID StealthMode
DDM RecoveryOS ScreenRecording InternetSharing FirewallEnabled
ScreenSaverDelay launchctl SIP Continuity LDAP
CIS SIP StartupItem requireAlphanumeric FileSharing
com.apple.SystemPolicy defaults plutil kextload Gatekeeper
ScreenSharing RemoteLogin com.apple.SystemPolicy SSO PasswordPolicy
PayloadContent networksetup idleTime BlockAllIncoming SystemPolicy
PrinterSharing AppleSilicon UniversalControl APFS InternetSharing
TouchID ASR OpenDirectory ConfigurationProfile ABM
TimeMachine MACE SystemPolicy NIST kextunload
expirationDays APFS SCEP com.apple.loginwindow nvram
Rosetta csrutil plutil jamf read
Spotlight com.apple.Safari AppleSilicon SAML SecureBoot
plist systemsetup ApplicationFirewall osascript com.apple.security
AuthorizationRight dscl sudo RemoveApplication fdesetup
launchctl mobileconfig LoginwindowText CMMC 800-53
Accessibility autopkg ScreenSaverDelay PlistBuddy read
SCEP DirectoryService TouchID remediate LDAP
sudo MDM XProtect osascript ScreenSharing
/Library/Preferences Sidecar com.apple.Terminal /System/Library pwpolicy
/usr/bin expirationDays MACE requireSymbol plist
codesign xattr true SecureBoot enforced
kextload Rosetta AllowedApplications 800-53 DDM
FirewallEnabled translocation xattr AppleSilicon PacketTunnel
VPN FirewallEnabled iCloud Bootstrap InternetSharing
WindowServer idleTime networksetup munki RequirePassword
MACE BluetoothSharing codesign SocketFilter maxFailedAttempts
SecureToken profile nvram NSGlobalDomain com.apple.loginwindow
800-53 SecureEnclave FaceID ScreenSharing SecKeychain
pmset systemsetup PowerNap TouchID Kerberos
InternetSharing 800-171 nvram write com.apple.Safari
mSCP CIS Microphone chown softwareupdate
payload CryptoTokenKit LoginwindowText AuthorizationRight LoggingEnabled
ASR read csrutil com.apple.screensaver STIG
CryptoTokenKit historyCount Volume PayloadType Hardened Runtime
defaults MACE STIG baseline NSGlobalDomain
munki pmset StealthMode benchmark com.apple.finder
allowed hdiutil APFS DEP historyCount
AppleSilicon SIP com.apple.loginwindow SSO defaults
ContentFilter PrinterSharing com.apple.TCC SecureEnclave BlockAllIncoming
loginwindow compliant com.apple.screensaver profiles TouchID
sudo networksetup com.apple.Safari com.apple.mail PlistBuddy
ApplicationFirewall Camera plutil com.apple.screensaver DisableGuestAccount
MACE App Icon

M.A.C.E.

macOS Advanced Compliance Editor

Build, customize, audit, and deploy macOS security baselines

$|

No Command Line Required

Visual interface for creating and managing compliance baselines. Built with SwiftUI for a fast, native macOS experience.

Create

All-in-One Workflow

Create, customize, audit, and export from a single app. Browse 500+ security rules with powerful search and filtering.

.mobileconfig

MDM-Ready Exports

Generate deployment-ready profiles for Jamf, Intune, and more. Export to mobileconfig, plist, DDM, and signed profiles.

Ready to Simplify macOS Compliance?

Download MACE for free and start building your security baselines today.