8,900+Downloads

800+Security rules

150+GitHub stars

No Command Line Required

mSCP normally runs on scripts. MACE takes that hassle away, offering the official mSCP build engine alongside its own native engine for building compliance.

New baseline

All-in-One Workflow

Create, customize, build, audit, and document baselines in one app. 800+ rules from every supported macOS, iOS, and visionOS release in NIST's macOS Security Compliance Project.

.mobileconfig

✓✓✓

MDM-Ready Exports

Deploy straight to Jamf Pro, Workspace ONE, Intune, Iru, Fleet, Addigy, and more, or build mobileconfig, plist, DDM, and signed profiles locally for any MDM.

Built for the frameworks you answer to

CIS Level 1 & 2
NIST 800-53
DISA STIG
CMMC
NIST 800-171
CIS v8
CNSSI-1253
HICP
NL MAPGOV

See every baseline on the mSCP GitHub

See MACE in Action

Main Menu

Your compliance command center

See What MACE Produces

Real output from a real build.

Audit Report

Rule-by-rule pass and fail results with pass rate, severity, and compliance mapping, ready to hand to an auditor.

HTML PDF XLSX CSV JSON Markdown AsciiDoc

Compliance Documentation

Full baseline guide with rule discussions, check procedures, and remediation steps for every control.

HTML PDF XLSX CSV JSON Markdown AsciiDoc

* Every report is fully customizable. These are the default outputs.

historyCount com.apple.loginwindow BlockedApplications SAML write

Gatekeeper SSHEnabled T2 ContentFilter maxFailedAttempts

BluetoothSharing networksetup RecoveryOS APFS osascript

ScreenRecording RestrictedSoftware autopkg hardening csrutil

chown mSCP Volume RecoveryOS ConfigurationProfile

RecoveryOS Gatekeeper BlockAllIncoming NSGlobalDomain /Library/Preferences

kernel_task ARDAgent idleTime com.apple.screensaver autopkg

kernel_task BlockedApplications SecureToken Bootstrap CAC

hdiutil AppleSilicon SmartCard 800-53 MDM

InstallApplication SecureEnclave PIV DirectoryService diskutil

com.apple.TCC SSHEnabled BlockedApplications ASM RemoteLogin

Firewall SCEP diskutil read xattr

plist sudo AirDrop com.apple.SystemPolicy SSO

translocation ActiveDirectory AllowedApplications PIV SAML

SecKeychain mdmclient declaration com.apple.finder write

LaunchAgent LoggingEnabled systemsetup idleTime profiles

Notarization mobileconfig 800-171 StealthMode defaults

com.apple.Terminal ASM com.apple.loginwindow PacketTunnel killall

hdiutil launchctl systemsetup jamf com.apple.loginwindow

profiles sudo chown com.apple.Safari security

historyCount SecureEnclave FindMy kernel_task required

autopkg MDM Gatekeeper /usr/bin RecoveryOS

PIV security MDM AuthorizationDB maxFailedAttempts

Entitlements Gatekeeper CIS Accessibility Keychain

ASM ABM FindMy true DirectoryService

SecKeychain BluetoothSharing Firewall pmset nvram

requireAlphanumeric com.apple.Terminal com.apple.screensaver FileVault networksetup

SecKeychain translocation ContentFilter read FullDiskAccess

InstallApplication pwpolicy systemsetup remediate CIS

com.apple.security com.apple.SystemPolicy SecureEnclave RemoteLogin BlockedApplications

jamf 800-171 ScreenSaverDelay com.apple.SystemPolicy ditto

PayloadContent PIV BluetoothSharing AuthorizationRight InstallApplication

SecKeychain requireAlphanumeric SecureEnclave LaunchAgent XProtect

SAML WindowServer ditto historyCount LaunchDaemon

MCX Entitlements TouchID write PIV

TCC allowed softwareupdate FindMy required

com.apple.mail ApplicationFirewall audit BlockedApplications minLength

AuthorizationDB systemsetup true spctl CIS

XProtect hdiutil com.apple.finder dscl SecureBoot

OTA FirewallEnabled PrinterSharing PrivacyPreferences LoginwindowText

800-171 maxFailedAttempts softwareupdate SecureBoot SIP

com.apple.security Handoff read TimeMachine firmwarepasswd

PrinterSharing DDM codesign IPSW SecKeychain

Camera STIG Gatekeeper osascript benchmark

defaults enabled osascript 800-171 CIS

STIG write SocketFilter AuthorizationDB com.apple.finder

InstallApplication ASM PrinterSharing PayloadContent FileSharing

ScreenSharing SecKeychain CAC FaceID InstallApplication

pwpolicy SecureEnclave spctl FindMy DEP

ASM PlatformSSO requireSymbol TouchID SystemUIServer

security VPN quarantine munki PacketTunnel

expirationDays MACE sudo autopkg Notarization

SSO PacketTunnel FileSharing WiFi SystemUIServer

/var/db SecKeychain SCEP TCC killall

declaration com.apple.Safari ScreenSaverDelay dscl sudo

com.apple.loginwindow com.apple.mail Keychain SecureEnclave ditto

kextunload ActiveDirectory LaunchAgent WindowServer AppleSilicon

TouchID PayloadContent ScreenRecording SecureEnclave BluetoothSharing

softwareupdate OAuth mSCP Gatekeeper OIDC

RecoveryOS SmartCard FaceID PacketTunnel TouchID

Ready to Simplify Apple Compliance?

Download MACE for free and start building your security baselines today.

Download MACE Read the Docs