App Trust Preview

Understand Mac software before you open or install it. Inspect apps, disk images, installer packages, executables, and scripts in App Trust Preview or directly in Finder with Quick Look. Compare before updating Compare an inspected app with its installed version, without needing a previous scan. See meaningful changes, confirmation when verified signing developers match, and warnings about developer changes or signature problems. Look beyond the main app - Check signatures, notarization, secure signing timestamps, and Apple's recorded 'Developer ID since' date. Disk images and the apps inside them have separate notarization results. - Inspect sandboxing, Hardened Runtime, entitlements, and bundled helpers that can operate outside the main app's sandbox. - Find declarations of login items, launch agents, launch daemons, and privileged helpers. - Review privacy capabilities and available saved macOS permission decisions. Some user privacy decisions are unavailable on macOS 27 or later. - Explore internet access, potential domains and URLs, and local file paths found in bundled files. These are static clues, not proof of connections or file access. - Compare CPU architectures and minimum macOS versions for individual components and Mach-O slices. See logical size and actual space used on disk. - Check Sparkle update configuration, feed security, and update-signing settings. Identify technologies and linked libraries. - Inspect installer payloads, destination paths, and installation scripts. Read script contents without running them. - View available download history and quarantine metadata. Copy file hashes or open existing VirusTotal results without uploading the inspected file. Keep notes across your Macs Add personal notes to apps and read them in reports and Quick Look. iCloud sync is on by default and can be turned off in Settings. Only notes sync. Reports, inspected files, and other settings stay local. Make reports your own Choose and reorder panels. Export reports as PDF, PNG, JSON, or text, or use the command-line interface in your workflows. Save apps as folders, ZIPs, or DMGs, and install them at your request. Add compatible tools, including App Archiver, to 'Open with other apps'. Inspection runs locally and does not launch or upload the software being analyzed. Some checks require the optional inspection script. Full Disk Access is optional for protected privacy records. Missing evidence is not a clean bill of health. App Trust Preview is not a malware scanner and cannot guarantee an app is safe.