Understand Mac software before you open it.
App Trust Preview is a local-first macOS app that turns security metadata into a readable trust report for apps, installers, disk images, executable binaries, and scripts. It helps you review software before you open or install it by showing concrete macOS trust signals in plain language.
Website · Mac App Store · CLI guide · FAQ · Privacy · Support
- Code signing status, Team ID, bundle ID, version, certificate chain, signing timestamp, and whether the signature still matches the file on disk
- Apple safety signals such as Developer ID or Mac App Store distribution, notarization, certificate revocation, quarantine, App Sandbox, Hardened Runtime, and network declarations
- Entitlements grouped into readable areas such as files, internet, devices, iCloud, Keychain, App Groups, Associated Domains, and Hardened Runtime exceptions
- Privacy access strings and saved macOS permission decisions when they are available to the local scan
- Nested apps, helpers, login items, XPC services, app extensions, frameworks, dynamic libraries, and plug-ins
- Technology signals such as Electron, Chromium, CEF, Flutter, Qt, SwiftUI, AppKit, Java, Python, .NET, Godot, browser engines, and other runtime or framework indicators
- Package contents, installer scripts, disk image apps, Mach-O metadata, linked libraries, runtime search paths, and readable script previews
- Use the main app to drag in a target, choose from disk, review details, and export reports
- Use Finder Quick Look to inspect supported files before opening them
- Use the command line interface to export text or JSON reports for automation, review pipelines, and AI agent analysis
- Export reports from the app as PDF, PNG, JSON, or plain text
App Trust Preview is designed around local analysis. The inspected software is not uploaded, launched, modified, granted permissions, or denied permissions by the app. Reports are generated on your Mac. Certificate revocation checks use macOS trust services rather than an App Trust Preview server.
App Trust Preview is not antivirus and cannot prove that software is safe or malicious. It gives practical context so users and reviewers can make a more informed trust decision before running software.
components/AppTrustPreviewInspect is the external inspection helper used by App Trust Preview when sandboxed app code needs system-level inspection support. It handles Gatekeeper assessment, strict bundle seal verification, privacy database reads when the user has granted the needed access, disk image extraction and cleanup, and handoff back to the installed main app.
The component is MIT licensed and carries an MIT license header in the file itself.
- macOS 10.13 or later
- App Trust Preview from the Mac App Store