santa ☆
« Back to VersTracker
Description:
Binary authorization system
Type: Cask  |  Latest Version: 2026.8@0  |  Tracked Since: Dec 17, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: security macos binary-authorization endpoint-security malware-prevention
Install: brew install --cask santa
About:
Santa is a binary authorization system for macOS that monitors and controls process execution using a rule-based approach. It can operate in a monitor-only mode to log execution events or in a block mode to prevent unauthorized binaries from running. This tool provides a robust security layer for detecting and preventing malware execution.
Key Features:
  • Kernel-level process monitoring via EndpointSecurity API
  • Flexible rule system (allowlist, blocklist, and certificate rules)
  • Event logging for forensic analysis
  • Support for both monitor and block modes
  • Integration with system extensions for enhanced security
Use Cases:
  • Preventing execution of known malware or unauthorized applications
  • Auditing process execution across an enterprise fleet
  • Enforcing compliance by blocking non-approved software
  • Investigating security incidents through execution logs
Alternatives:
  • BlockBlock – Focuses on persistent threat monitoring rather than real-time execution control
  • KnockKnock – Primarily for persistence enumeration, not live process blocking
Version History
Detected Version Rev Change Commit
Sep 16, 2026 8:53pm 2026.8 0 VERSION_BUMP 284bb9ad
Aug 4, 2026 5:25pm 2026.7 0 VERSION_BUMP 299f1d98
Jul 10, 2026 5:13pm 2026.6 0 VERSION_BUMP ad2eee9e
Jun 8, 2026 5:45pm 2026.5 0 VERSION_BUMP a7f761a5
May 20, 2026 8:07pm 2026.4 0 VERSION_BUMP a2e79f67
Apr 10, 2026 7:43pm 2026.3 0 VERSION_BUMP 1a562e4c
Mar 3, 2026 10:46pm 2026.2 0 VERSION_BUMP a8591e39
Jan 29, 2026 10:36pm 2026.1 0 VERSION_BUMP 10db69c1
Dec 18, 2025 7:39pm 2025.12 0 VERSION_BUMP c6462c52
Dec 17, 2025 7:45pm 2025.11 0 VERSION_BUMP 14fd910b
Aug 28, 2025 7:50pm 2025.8 0 VERSION_BUMP 22fba37e
Jul 31, 2025 4:18pm 2025.7 0 VERSION_BUMP e3133f18
Aug 7, 2024 3:54pm 2024.7 0 VERSION_BUMP 76691200
Jul 26, 2024 3:52pm 2024.6 0 VERSION_BUMP 0d342c12
Dec 24, 2023 9:24am 2023.10 0 VERSION_BUMP 9c677338
Nov 14, 2023 10:10am 2023.9 0 VERSION_BUMP 60c1dac6
Oct 6, 2023 4:06pm 2023.8 0 VERSION_BUMP 87b2d7aa
Apr 6, 2023 4:46pm 2023.3 0 VERSION_BUMP e92ca2a0
Mar 1, 2023 3:59pm 2023.2 0 VERSION_BUMP ff1be00f
Feb 12, 2023 4:11am 2023.1 0 VERSION_BUMP 99c4b943
Nov 28, 2022 9:31pm 2022.11 0 VERSION_BUMP 8fb2cda2
Nov 18, 2022 3:23am 2022.10 0 VERSION_BUMP 5cd0edf2
Nov 14, 2022 11:32pm 2022.9 0 VERSION_BUMP 7c15ded7
Oct 13, 2022 11:14pm 2022.9 0 VERSION_BUMP b0ebbef8
Aug 26, 2022 5:11pm 2022.8 0 VERSION_BUMP fbbf3826
Jul 28, 2022 8:06am 2022.7 0 VERSION_BUMP 3046ab0e
Jul 8, 2022 1:07am 2022.6 0 VERSION_BUMP 38e374fe
Jun 30, 2022 8:45am 2022.5 0 VERSION_BUMP 9a3faa91
« Back to VersTracker  |  Browse Packages  |  About