Vigil Build 14 — MCP Threat Detection, Glance Mode, and the Capability Ledger

When we introduced Vigil, it was a behavioral system monitor — watch your processes, learn what normal looks like, flag what isn’t. That’s still the foundation. But over the last several builds, a question kept pulling the roadmap in one direction: what is the biggest new thing running on your Mac that you can’t see? The answer, for a growing number of people, is AI agents. Coding assistants with shell access. MCP servers with tool definitions you’ve never read. Scheduled tasks that run an agent at 3 AM with pre-approved permissions and no human watching. Build 14 is Vigil leaning hard into that answer. ...

July 22, 2026 · 6 min · Subversive Software

Introducing Prism

We’re releasing Prism, a native macOS HTTP proxy that observes your network traffic and surfaces privacy concerns — trackers, fingerprinting, unencrypted data, and suspicious connection patterns — without decrypting your HTTPS traffic. The gap it fills Tapped shows you where your Mac is talking at the packet level. But it doesn’t interpret what it sees — it’s a visibility tool for people who already know what to look for. On the other end, browser extensions like uBlock Origin block ads in one browser but can’t see traffic from the dozens of other apps on your Mac. ...

July 21, 2026 · 3 min · Subversive Software

Harden 1.1 — CIS Benchmarks, Compliance Reports, and Agent Mode

Harden 1.1 is a major update — 93 security checks (up from 64), dual compliance framework support (DISA STIG + CIS Benchmarks), exportable compliance reports, and a headless agent mode for fleet-scale scanning. CIS Benchmark compliance Harden now maps checks against the CIS Apple macOS 15.0 Sequoia Benchmark v1.1.0, the most widely adopted security standard outside the U.S. Department of Defense. 72 CIS rules are covered alongside the existing 47 DISA STIG rules. The new Compliance tab lets you switch between STIG and CIS views, each showing your system’s status from the framework’s perspective — for every rule, are you compliant or not? ...

June 19, 2026 · 4 min · Subversive Software

Introducing Harden

Updated June 2026: Harden 1.1 is out with 93 checks (up from 52 at launch), dual DISA STIG + CIS Benchmark compliance, HTML/JSON/CSV compliance reports, headless agent mode with scheduled scanning, and 38 one-click fixes. See the product page for full details. We’re releasing Harden, a native macOS tool that audits your Mac’s security configuration against best-practice checks — including DISA STIG and CIS Benchmark controls — and helps you fix what it finds. No Terminal required. ...

May 26, 2026 · 2 min · Subversive Software

Introducing Vigil

We’re releasing Vigil, a native macOS system monitor that watches your processes and file activity, learns what “normal” looks like, and flags anything unusual. It’s a behavioral antivirus — it doesn’t block, it observes and reports. The gap it fills Activity Monitor tells you CPU percentage and memory usage. But it can’t tell you that a process is doing ten times its normal disk I/O, that an unknown process appeared with no executable path, or that an AI coding tool just touched files outside its expected scope. Vigil fills that gap with behavioral baselines and heuristic analysis. ...

May 26, 2026 · 2 min · Subversive Software