// macOS Privacy Guard, v1.1
Your Mac. Your Rules.
// the app
// capabilities
Sentinel doesn't just watch, it acts. Every camera access, mic activation, USB plug-in, and Bluetooth pairing requires your explicit approval. Unknown = blocked.
Every app that touches your camera must be approved. Approve & remember trusted apps, or block them forever, blocked apps are killed the instant they try again. No recording possible.
APPROVE / BLOCKReal-time microphone access control. Approve trusted apps once and never see them again. Block rogue apps and they are killed on contact, before a single frame of audio is captured.
APPROVE / BLOCKEvery TCP and UDP connection mapped to its exact process. Resolved hostnames, live traffic bytes, port scanner, LAN device discovery, and one-click process termination.
INSPECT / KILLNo USB device connects silently. Every plug-in triggers an approval prompt, allow and remember it, or block it forever. Blocked storage devices are automatically force-ejected on every reconnect.
APPROVE / EJECTEvery Bluetooth pairing goes through Sentinel. Approve trusted devices and they connect silently from then on. Block unwanted devices and they are disconnected the instant they try to pair.
APPROVE / DISCONNECTSentinel locks behind Touch ID or Apple Watch on every launch. Monitoring never pauses, but your approval history and threat data stay completely private until you authenticate.
ALWAYS PROTECTED// apple watch integration
When Sentinel needs your approval, a double-click of the Apple Watch side button is all it takes. No typing, no unlocking, no reaching for the keyboard — just your wrist.
// pricing
Pay once. No renewal, no subscription, no catch. Free update.
// macOS 26 Tahoe or later · Apple M chip required
Already have a license? Transfer to this Mac →
// how it works
An app activates your camera, mic, USB port, or Bluetooth, Sentinel intercepts it in real time using CoreMediaIO, CoreAudio, IOKit, and IOBluetooth. The action is held pending your decision.
A prompt surfaces with the app name, bundle ID, and what it wants. Hit Approve & Remember to whitelist it silently from now on. Hit Block Always and it is denied on the spot, and killed or ejected every time it tries again.
Approved apps connect silently forever. Blocked apps are terminated or ejected automatically, no alert, no confirmation. Your permissions are stored securely in the macOS Keychain, never in plaintext.
// $19 one-time · no subscription · no telemetry
Sentinel runs entirely on your Mac. No cloud. No accounts. No tracking. Every decision, approve or block, stays on your device, encrypted in the macOS Keychain. Pay once. Keep it forever.
// requires macOS 26 Tahoe or later · Apple M chip required