Vigil Build 14 — MCP Threat Detection, Glance Mode, and the Capability Ledger

When we introduced Vigil, it was a behavioral system monitor — watch your processes, learn what normal looks like, flag what isn’t. That’s still the foundation. But over the last several builds, a question kept pulling the roadmap in one direction: what is the biggest new thing running on your Mac that you can’t see? The answer, for a growing number of people, is AI agents. Coding assistants with shell access. MCP servers with tool definitions you’ve never read. Scheduled tasks that run an agent at 3 AM with pre-approved permissions and no human watching. Build 14 is Vigil leaning hard into that answer. ...

July 22, 2026 · 6 min · Subversive Software

Introducing Vigil

We’re releasing Vigil, a native macOS system monitor that watches your processes and file activity, learns what “normal” looks like, and flags anything unusual. It’s a behavioral antivirus — it doesn’t block, it observes and reports. The gap it fills Activity Monitor tells you CPU percentage and memory usage. But it can’t tell you that a process is doing ten times its normal disk I/O, that an unknown process appeared with no executable path, or that an AI coding tool just touched files outside its expected scope. Vigil fills that gap with behavioral baselines and heuristic analysis. ...

May 26, 2026 · 2 min · Subversive Software