Endpoint security for macOS · in development

Know every app, agent and connection on your Macs.

Acorn is a macOS client that approves or blocks software, filters the network and shows which AI tools are running. It's configured by MDM profiles, so there's nothing to set up on the Mac itself.

See what it does Get in touch
  • Status
  • AI
  • Tools
  • Sessions
  • Apps
  • Network
  • Config
Acorn Enterprises

AI

AI apps, coding agents and what they're set up to use, found on this Mac.

3Apps & agents
2 of 3MCP servers running
14Skills & extensions
17Sessions, 14 days

Skills & instructions

  • apple-design SkillClaude Code · GitSanctioned
  • built-in-browser SkillClaude Code · syncedSanctioned
  • chrome-browser SkillClaude Code · syncedUnsanctioned
  • CLAUDE.md InstructionsGitSanctioned
  • computer-use SkillClaude Code · syncedUnsanctioned
  • deep-research SkillClaude Code · syncedSanctioned

8 more in Tools.

Model Providers

  • Anthropicapi.anthropic.comSanctioned
  • OpenAIapi.openai.comSanctioned

Recent Sessions

  • Claude Code backend642 tools · 6m ago
  • Claude Code frontend48 tools · 1h ago

Illustrative data

One client for network, software and AI on the Mac

Everything Acorn finds stays read-only and on the Mac unless it is set up to report to a server.

Network filter

Block domains and IP ranges from MDM rules and see every connection in a filterable table.

App inventory

Installed software across 12 categories, with code signatures, first-seen dates and every change between scans.

AI tools

Coding agents, MCP servers, skills, hooks and local models, with risky configurations flagged.

Allow and block policy

Approve or forbid software by rule. The Status page reports anything forbidden.

AI visibility

See the agents, MCP servers and models on every Mac

Acorn finds AI apps, coding agents, MCP servers, skills, hooks and local models, flags risky configurations and summarises coding-agent sessions from metadata only. Prompts and file contents never leave the Mac.

Configured by MDM, rolled out in stages

Settings arrive as MDM profiles, and rule changes are released to groups of Macs one at a time.

  1. Step 1

    Build profiles

    Set rules, features and branding in Acorn Config and export signed MDM profiles.

  2. Step 2

    Upload to your MDM

    Scope the profiles and the Acorn app to devices in an existing MDM.

  3. Step 3

    Roll out in stages

    Rule changes go out to one group of Macs at a time, so a bad rule never reaches every Mac at once.

How it's built

Read-only by design

Acorn never runs the tools it finds and stores no secrets from config files.

Prompts stay on the Mac

Coding-agent sessions are summarised from metadata only. Prompts and file contents are never collected.

Built on Apple's APIs

The network filter is a sandboxed system extension using Apple's Network Extension content filter.

Get in touch

Questions or feedback about Acorn? Send us an email.

Email hello@acornsec.com