Per-App Biometric Gate.
Gate Telegram, WhatsApp, Terminal, Xcode, or any app behind Touch ID or Master PIN fallback before windows render.
BIOMETRIC PRIVACY FOR MACOS
Lock tight.
Move freely.
Instant Touch ID protection for sensitive macOS applications, military-grade encrypted folder vaults, and instant stealth privacy when you step away.
LOCAL SECURE ENCLAVE.
AES-256 ENCRYPTED VAULT.
↓ SCROLL TO EXPLORE
TOUCH ID / ACTIVE ENGINE
PROTECTED · SLEEP-LOCKED
01 / APPGUARD CORE PILLARSTotal privacy.
Total privacy.
Zero friction.
Built natively in Rust and Tauri with macOS LocalAuthentication and kernel-level event monitoring. AppGuard shields your conversations, source code, credentials, and confidential files behind biometric gates.
AES-256 Folder Cloaking.
Encrypt confidential directories, SSH keys, and client documents with hardware-accelerated AES-GCM cryptography.
Instant Auto-Arming.
Locks apps immediately upon display sleep, screensaver activation, or custom zero-click grace timeout windows.
02 / INTERACTIVE BIOMETRIC SIMULATIONOne touch.
One touch.
Instant verification.
TOUCH ID → SECURE ENCLAVE → VAULT UNLOCKED
System idle · Awaiting biometric handshake or PIN passkey.
Local Secure Enclave emulation · No telemetry recorded
TOUCH IDENCLAVEUNLOCKED
03 / BUILT IN. NO SUBSCRIPTION REQUIRED.Engineered for power users.
Engineered for power users.
Crafted for macOS.
Every tool you need to protect client code, trade secrets, sensitive chats, and personal files without clunky third-party bloat.
LOCAL AUTH
Touch ID & Apple Watch
Authenticates against the Apple Secure Enclave coprocessor in under 5 milliseconds with native system dialogs.
STORAGE
Hardware AES-256 Vault
Military-grade AES-GCM encryption cloaks sensitive folders until authorized. Files remain completely encrypted at rest.
BACKGROUND
Tamper-Proof Daemon
Runs as a persistent background daemon with watchdog recovery to prevent unauthorized process termination.
PRIVACY
Lock-on-Sleep
Monitors macOS IOKit power events to arm protection immediately the millisecond your MacBook lid closes or screensaver starts.
FAILSAFE
Master PIN Fallback
SHA-256 salted PIN safeguard ensures you never lose access when clamshell mode is active or Touch ID is temporarily unavailable.
WORKFLOW
Smart Grace Timers
Configurable unlock grace periods (30s to 15m) so you stay in flow during rapid app switching without repeated prompts.
04 / CRAFTED APPEARANCE
7 Handcrafted Themes
Tailored to match your setup. Switch seamlessly between daylight minimal and late-night dark modes.
✦ Nordic Minimal✦ Editorial Warm✦ Obsidian Cyber✦ Modern Slate✦ Emerald Zen✦ Rose Quartz✦ Sunset Amber
05 / PRIVACY GUARANTEEYour machine.
Your machine.
Your sovereignty.
Most modern security apps secretly phone home with telemetry and require cloud subscriptions. AppGuard takes the opposite stance: pure, local-first computing.
- Zero telemetry, zero crash analytics, and zero external trackers.
- Runs fully offline — no internet connection required after download.
- Lightweight Rust core with < 15 MB binary size and negligible battery drain.
- Complete user ownership of encryption keys and local config files.
06 / INSTALLATION & BUILDSAvailable today.
Available today.
Universal macOS binaries.
Apple SiliconRecommended
Optimized for M1, M2, M3, and M4 chips with native ARM64 instructions and Secure Enclave acceleration.
Intel x86_64Universal
Full support for Intel-based MacBooks, iMacs, and Mac Minis with T2 Security Chip Touch ID integration.
Homebrew TapCLI Package
Install and update automatically via your terminal with a single command: brew install --cask novitaswebworks/tap/appguard.
07 / FREQUENTLY ASKED QUESTIONSClear answers.
Clear answers.
No surprises.
How does AppGuard intercept apps before they open?
AppGuard leverages native macOS accessibility and workspace notification APIs (NSWorkspace) combined with a high-performance Rust daemon to intercept window activations in under 5ms, displaying the biometric challenge before any sensitive screen content is drawn.
Does AppGuard send any data or keys to the cloud?
Never. AppGuard is strictly local-first and airgapped by design. It makes zero external network requests, contains no analytics SDKs, and stores your encrypted vault keys exclusively inside your local keychain and encrypted app state.
What happens if Touch ID fails or my Mac is in clamshell mode?
You can instantly authenticate using your encrypted Master PIN fallback or your macOS system passcode. You will never be locked out of your workstation.
Can someone bypass AppGuard by force-quitting the app in Activity Monitor?
AppGuard features built-in tamper protection. The core daemon runs as a privileged system helper with auto-restart hooks, and locked applications are immediately hidden or terminated if the security daemon is interrupted.
Is AppGuard a subscription or one-time purchase?
AppGuard is free and open-source with no recurring subscription tiers. Download the binary, install it to /Applications, and enjoy lifetime protection.
Protect your
private horizon.
Download AppGuard for macOS. One click to install, effortless biometric privacy that runs whisper-quiet in the background.