“By default, for example, cannot get access to most of the files on the hard drive. Reed also believes the nature of sandboxing on MacOS actually restricts antivirus software, at least if you download it from the App Store. He told me that Gatekeeper still won’t perform a signature check on non-quarantined apps on launch, meaning a malicious actor could tamper with a legitimate app and it would still be permitted to run on MacOS.

However, Reed still doesn’t believe these go far enough. What about the new security features in MacOS Big Sur? Apple says apps will require your permission before accessing your documents, desktop files, iCloud Drive, and external drives, plus it’s promising greater security thanks to a dedicated system volume for the operating system and the T2 Security Chip in new Macs. Reed explained that it only checks files against 94 rules, “a tiny fraction of the rules found in any more powerful antivirus engine.” Kirk McElhearn, co-host of Mac security firm Intego’s podcast and a writer on malware topics, concurs that XProtect only looks out for “a handful of strains of malware.” In addition, XProtect’s list of malicious file signatures is hardly all-encompassing. “The nature of sandboxing on MacOS actually restricts antivirus software.”

“For example, torrent software often doesn’t, while at the same time being used heavily in piracy.” “Adding that flag is not a requirement, and not all software does ,” he explained. Thomas Reed, Director of Mac & Mobile at security firm Malwarebytes, told me that the defenses aren’t as comprehensive as it seems. The MacOS layer of security relies on Apple adding quarantine tags to suspicious or outright malicious software, which in turn results in the warning dialogue you see when you try to open them. On top of that, all apps are sandboxed, meaning they can only do what they’re meant to do, without being able to access critical system infrastructure and settings.īut there are gaps in the armor that protect Mac users’ systems. And now, Apple has even started notarizing apps so that they can prove they are trustworthy. Gatekeeper, meanwhile, will prevent the app from opening without your permission if it hasn’t been digitally signed as safe by Apple. It works invisibly in the background, meaning it needs no maintenance or activation and doesn’t slow down your Mac.

For example, when you download an app off the internet, your Mac checks it against a list of known malware apps using XProtect. Microsoft Edge opens AI-upscaled video to AMD graphics cardsĪnd Macs really do have some stellar built-in tools that protect you right off the bat.

Avg antivirus software for mac