fort: An open-source macOS security auditing tool for SOC 2 and ISO 27001 compliance

Every month, before a SOC 2 audit, I found myself asking the same question: 'Is my Mac actually configured securely?'

The answer usually meant digging through system settings, running terminal commands I could never remember, and manually collecting evidence for auditors.

fort checks your Mac against common security best practices, helps fix issues with your approval, and generates a report you can use for compliance and audit evidence.

No agent, no signup, no MDM, no telemetry. One MIT-licensed Go binary.