Skip to content

Releases: MACE-App/MACE

v0.2.0-beta

28 May 16:33
b6d0f93

Choose a tag to compare

Main App Changes

  • Fixed: Update installer now shows a helpful error when running from a DMG instead of a cryptic "volume is read only" message. (User Reported)
  • Added: CMMC Level 3, HICP Large Practice (healthcare), and visionOS STIG from mSCP dev_2.0. Compliance list is manually maintained until dev_2.0 is merged to main.
  • Fixed: Resolved duplicate window routing issues in Audit and Build that could cause unexpected behavior.

Compliance Editor Changes

No changes this release.

Build Hub Changes

No changes this release.

Audit Builder Hub Changes

  • Changed: Export buttons consolidated into a single "Export" dropdown menu.
  • Added: "Export All Formats…" option — name a folder and all four formats (PDF, HTML, JSON, CSV, XLSX) are exported into it at once.
  • Removed: STIG Checklist option from the macOS menu bar — it's now available directly inside the app.
  • Added: STIG Checklist Export sheet accessible from the audit footer (STIG projects only).
  • Added: Fill-in Existing Checklist — load an existing DISA CKL (STIG Viewer 2) or CKLB (STIG Viewer 3) and MACE fills in your audit results.
  • Added: Generate from DISA STIG Source — provide the official DISA STIG ZIP or XCCDF XML to generate a complete checklist from scratch.
  • Added: JSON export format — available in the Export dropdown alongside PDF, HTML, CSV, and XLSX. (User Requested)
  • Updated: Audit search now matches STIG ID, CIS ID, user comments, and status text in addition to rule title, ID, and section.
  • Fixed: Audit checks for user-context rules (bluetooth_sharing_disable, hot_corners_secure, show_filename_extensions) now correctly resolve $CURRENT_USER when running via the privileged helper. (User Reported)
  • Added: Profile Inspector — a read-only audit mode that compares MDM-deployed configuration profiles against compliance rule expectations without running scripts, viewable by rule or by preference domain.

Documentation Builder Hub Changes

No changes this release.

Rule Builder Hub Changes

No changes this release.

Feedback Needed

Application rules are in alpha. These rules were derived from official CIS and DISA STIG sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules.

Your feedback on application rule accuracy and usability is especially appreciated.

We'd love your help testing features to make sure everything works as expected.

If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.

Known Issues

  • mSCP Engines: I expect issues with the mSCP engines since they rely on the mSCP 2.0 Python scripts, which don't have everything fully mapped out yet.
  • mSCP Engines: Custom rules are not currently supported.
  • UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.
  • (Sequoia & Below): Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.
  • Console logging: May not capture all events. Logging is being improved incrementally as features are updated.

v0.1.9-beta

26 May 19:25
b6d0f93

Choose a tag to compare

Main App Changes

  • Added: Sync Status — shows the output sync status for mSCP and MACE builds compared to the current rule set. Allows users to see if rules roughly match the last generated output and whether anything has changed since. Keeps an audit history of each run including what was generated and when.

  • Added: Sync Status settings, title bar pill, and output tracking — added Hide Sync Indicator and Show Output Icons toggles to Settings, attached the sync pill to compliance editor windows, and wired sync recording into Build, Audit, Documentation, and MDM export outputs.

  • Updated: "Check for Updates" in the menu bar now uses the same sheet popup as the main menu button, whether a project is open or not.

  • Updated: mSCP GitHub box on the main menu now uses ultraThinMaterial background and a softer blue/purple gradient border to match the main panels.

Compliance Editor Changes

  • Added: Filter Rules picker in the rules header bar that lets users narrow the list to rules with mobileconfig payloads (optionally by specific PayloadType), DDM entries, or script fixes — populated dynamically from the loaded ruleset and hidden automatically on narrow windows or projects with no remediation data.

  • Updated: Removed "Rules" title and redesigned header bar layout — replaced "Display Mode" and "Sort By" labels with compact captioned controls (Add, View, Sort, Filter Rules) using consistent styling throughout. (User Requested)

  • Updated: Reordered the Build, Audit, and Documentation buttons to enforce the correct deployment workflow — you can't audit what hasn't been deployed, and you can't document what hasn't been built and tested.

  • Updated: Rule search now matches against tags and mobileconfig payload types in addition to title, rule ID, and STIG/CIS ID.

  • Fixed: Fixed the lines and height of the header between the rule values and the rule view.

  • Fixed: The background hue in dark mode for the rule values header area.

  • Added: Markdown rendering for Discussion field in view mode (_italic_, **bold**, `code`, [links](url), - bullets); raw text still shown when editing.

Build Hub Changes

No changes this release.

Audit Builder Hub Changes

No changes this release.

Documentation Builder Hub Changes

  • Fixed: "DISABLED COMMENT" and "ADDED COMMENT" subsection labels in PDF export now render in their correct colors (red and green) instead of gray.

Rule Builder Hub Changes

No changes this release.

Feedback Needed

Application rules are in alpha. These rules were derived from official CIS and DISA STIG sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules.

Your feedback on application rule accuracy and usability is especially appreciated.

We'd love your help testing features to make sure everything works as expected.

If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.

Known Issues

  • mSCP Engines: I expect issues with the mSCP engines since they rely on the mSCP 2.0 Python scripts, which don't have everything fully mapped out yet.

  • mSCP Engines: Custom rules are not currently supported.

  • UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.

  • (Sequoia & Below): Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.

  • Console logging: May not capture all events. Logging is being improved incrementally as features are updated.

Cleaned up: consistent - Label: bullets throughout, removed the stray "No changes this release." from Compliance Editor, fixed a doubled "for" typo, and normalized spacing.

v0.1.8-beta

20 May 12:51
b6d0f93

Choose a tag to compare

Main App Changes

No changes this release.

Compliance Editor Changes

  • Fixed: Sync no longer fails when a project file (like mscp.py) already exists at the destination as a symlink or hidden item — existing entries are now safely cleared before being replaced. (User Reported)

Build Hub Changes

  • Fixed: WS1 profile uploads now deliver every payload to managed Macs (the entire mobileconfig was being sent as a single Custom Settings entry, which WS1 re-wrapped on its end — Macs only ever saw the consent text banner; uploads now split the mobileconfig into one CustomSettings entry per Apple payload). (User Reported)

  • Fixed: WS1 compliance sensors now report all failing rules instead of just one (the script was using cat to dump each failure on its own line, but WS1 sensors only capture a single value per run — every device ended up showing one rule no matter how many actually failed; failures are now collapsed into a single comma-separated line like the Intune script already does. Requires a fresh build, and existing WS1 sensors should be re-uploaded to pick up the new script). (User Reported)

Audit Builder Hub Changes

No changes this release.

Documentation Builder Hub Changes

No changes this release.

Rule Builder Hub Changes

No changes this release.

Feedback Needed

Application rules are in alpha. These rules were derived from official CIS and DISA STIG sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules.
Your feedback on application rule accuracy and usability is especially appreciated.

We'd love your help testing features to make sure everything works as expected.

If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.

Known Issues

  • mSCP Engines: I expect issues with the mSCP engines since they rely on the mSCP 2.0 Python scripts, which don't have everything fully mapped out yet.

  • mSCP Engines: Custom rules are not currently supported.

  • UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.

  • (Sequoia & Below): Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.

  • Console logging: May not capture all events. Logging is being improved incrementally as features are updated.

v0.1.7-beta

18 May 18:57
b6d0f93

Choose a tag to compare

Main App Changes

  • Fixed: Application platform projects now correctly bundle and copy their rules (applications/ was silently missing from MACE.app due to the build script using an outdated path).

  • Fixed: Build, Audit, and Documentation Hubs now point mscp.py at the correct baseline file location for new dev_2.0 projects (was hardcoded to config/custom/baselines/, missed projects that save to custom/baselines/).

  • Fixed: Logo replacement in Documentation Hub now writes to the correct default-images directory for new dev_2.0 projects (was hardcoded to config/default/images/, silently no-op'd on projects using src/mscp/data/images/).

  • Fixed: Custom logo lookup now prefers the new custom/images/ location before the legacy config/custom/images/.

Compliance Editor Changes

No changes this release.

Build Hub Changes

No changes this release.

Audit Builder Hub Changes

No changes this release.

Documentation Builder Hub Changes

No changes this release.

Rule Builder Hub Changes

No changes this release.

Feedback Needed

Application rules are in alpha. These rules were derived from official CIS and DISA STIG sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules.
Your feedback on application rule accuracy and usability is especially appreciated.

We'd love your help testing features to make sure everything works as expected.

If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.

Known Issues

  • mSCP Engines: I expect issues with the mSCP engines since they rely on the mSCP 2.0 Python scripts, which don't have everything fully mapped out yet.

  • mSCP Engines: Custom rules are not currently supported.

  • UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.

  • (Sequoia & Below): Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.

  • Console logging: May not capture all events. Logging is being improved incrementally as features are updated.

v0.1.6-beta

18 May 16:37
b6d0f93

Choose a tag to compare

Main App Changes

  • Fixed: Workspace One UEM "Test Connection" now retrieves all Organizational Groups instead of capping at the first 500 — environments with more OGs no longer have entries missing from the picker.

  • Fixed: Rules no longer fail to load on new projects created from the latest mSCP repo (the new layout uses symlinks that Finder couldn't read through).

  • Fixed: "View on GitHub" links now open the correct page instead of 404'ing.

  • Fixed: mscp.py no longer aborts with the help screen when a project's default rules folder doesn't match the new upstream path — MACE now passes -R with the correct rules location every time.

  • Added: Support for both the new and old upstream mSCP folder layouts everywhere the app reads rules, baselines, custom overrides, or mscp-data.yaml.

  • Added: Log line showing how many junk files were swept out for mSCP Engine, when there were any.

  • Added: Automatic cleanup of .DS_Store (and any other non-YAML files Finder leaves behind) from the rules tree before each mscp.py run, so generation doesn't silently fail.

Compliance Editor Changes

  • Fixed: Custom rule overrides now resolve correctly regardless of which mSCP layout the project was built from.

Build Hub Changes

No changes this release.

Audit Builder Hub Changes

  • Fixed: Resolved a Swift 6 concurrency error in the Audit Engine that prevented the app from building under strict concurrency checking.

Documentation Builder Hub Changes

No changes this release.

Rule Builder Hub Changes

No changes this release.

Feedback Needed

Application rules are in alpha. These rules were derived from official CIS and DISA STIG sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent
home for these rules. Your feedback on application rule accuracy and usability is especially appreciated.

We'd love your help testing features to make sure everything works as expected.

If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.

Known Issues

  • mSCP Engines: I expect issues with the mSCP engines since they rely on the mSCP 2.0 Python scripts, which don't have everything fully mapped out yet.

  • mSCP Engines: Custom rules are not currently supported.

  • UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.

  • (Sequoia & Below): Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.

  • Console logging: May not capture all events. Logging is being improved incrementally as features are updated.

v0.1.5-beta

30 Apr 17:15

Choose a tag to compare

Main App Changes

No changes this release.

Compliance Editor Changes

  • Added: Right-clicking a rule now highlights it with a subtle gray background so you can clearly see which rule the context menu is acting on. The highlight clears automatically when the menu closes.

  • Fixed: Clicking a Copy button no longer steals the focus ring onto the first rule's checkbox in the rules list.

Build Hub Changes

  • Fixed: mSCP Engine — generated baselines and vendor manifests now contain accurate metadata, so they work correctly when imported into other tools or re-processed by mSCP.

  • Fixed: MACE Engine — built compliance scripts now include all rules. Gatekeeper, Firewall, Stealth Mode, and Gatekeeper Identified Developers checks were being silently dropped due to how MACE handled YAML rule structures with version-specific overrides.

Audit Builder Hub Changes

  • Fixed: mSCP Engine — audits now produce accurate results that match MACE's built-in audit engine, instead of silently passing or failing rules due to baseline export issues.

  • Fixed: MACE Engine — audits now correctly skip rules that don't apply to your Mac's architecture. Intel-only rules are marked Not Applicable on Apple Silicon, and Apple-Silicon-only rules are marked Not Applicable on Intel Macs.

  • Fixed: MACE Engine — audits now correctly handle rules with version-specific check overrides. On older macOS versions (14, 15), audits previously used the wrong check or skipped the rule entirely.

Documentation Builder Hub Changes

No changes this release.

Rule Builder Hub Changes

No changes this release.

Feedback Needed

Application rules are in alpha. These rules were derived from official CIS and DISA STIG sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules. Your feedback on application rule accuracy and usability is especially appreciated.

We'd love your help testing features to make sure everything works as expected.

If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.

Known Issues

  • mSCP Engines: I expect issues with the mSCP engines since they rely on the mSCP 2.0 Python scripts, which don't have everything fully mapped out yet.

  • mSCP Engines: Custom rules are not currently supported.

  • UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.

  • (Sequoia & Below): Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.

  • Console logging: May not capture all events. Logging is being improved incrementally as features are updated.

v0.1.4-beta

28 Apr 17:36

Choose a tag to compare

Main App Changes

  • Changed: Refreshed the sailor character logo — the previous version had its background removed incorrectly.

Compliance Editor Changes

No changes this release.

Build Hub Changes

  • Added: New advanced "Offline Script" mode for local builds generates a paired installer and uninstaller. The installer drops a LaunchDaemon on the Mac that runs the audit and remediation script on whatever schedule you pick, so compliance keeps running even when the device isn't checking in with your MDM.

  • Added: Offline Script mode also generates a pre-approval profile alongside the installer, so users never see a "Background Items Added" notification and can't disable the scheduled daemon from System Settings.

  • Added: "Offline Script" (Advanced) mode is now wired into the Jamf Pro, Workspace ONE, and Intune tabs. Toggle it on and the Build Hub uploads the installer, an auto-generated uninstaller, and the suppression profile straight to your MDM, which then pushes everything to your fleet.

  • Added: README now includes an "Offline Script — Offline Compliance Daemon" section whenever Offline Script mode is used, covering the file list, schedule behavior, deployment steps for Jamf, Kandji, Intune, and WS1, the removal flow, and log paths.

  • Changed: Build Hub now always opens with Offline Script (Advanced) mode off, so each session starts in Standard.

  • Added: Forced Mode dropdown in local build script generation — set the script's FORCED_MODE without manually editing the generated file. Options are none(default), --check, --fix, --cfc (recommended), and Command Line, with an info button explaining each mode.

  • Added: Forced Mode picker on the Compliance Scripts row in the Jamf Pro, Workspace ONE, and Intune tabs (same "What's this?" info popover) — bakes the chosen mode into the scripts uploaded to your MDM.

  • Fixed: Profile signing could pick the wrong certificate from your keychain. It now uses the exact certificate you select.

  • Changed: Profile signing UI is cleaner and more consistent — same look in both the Profiles column and the Offline Script suppression profile, with a "Why sign?" info popover replacing the inline status rows so the picker stays compact.

  • Changed: Output Format picker is now a compact right-aligned dropdown (replacing the segmented buttons), with an orange "Generates many files" warning chip that appears when Individual Scripts is selected.

  • Changed: Workspace ONE Token Region picker is now inline with Client ID and Client Secret as a compact dropdown — saves a row in the connection panel.

  • Changed: Upload warnings ("items will be updated", "scope/assign before they enforce", etc.) for Jamf Pro, Workspace ONE, and Intune now sit under the Upload Settings panel instead of below the Upload to MDM panel — keeps the upload list cleaner.

Audit Builder Hub Changes

No changes this release.

Documentation Builder Hub Changes

No changes this release.

Rule Builder Hub Changes

No changes this release.

Feedback Needed

Application rules are in alpha. These rules were derived from official CIS and DISA STIG sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules. Your feedback on application rule accuracy and usability is especially appreciated.

We'd love your help testing features to make sure everything works as expected.

If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.

Known Issues

  • mSCP Engines: I expect issues with the mSCP engines since they rely on the mSCP 2.0 Python scripts, which don't have everything fully mapped out yet.

  • mSCP Engines: Custom rules are not currently supported.

  • UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.

  • (Sequoia & Below): Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.

  • Console logging: May not capture all events. Logging is being improved incrementally as features are updated.

v0.1.3-beta

24 Apr 19:47

Choose a tag to compare

Main App Changes

  • Added: Brand logos to the engine selection cards across the Build, Documentation, and Audit hubs. mSCP engines now show the mSCP shield and M.A.C.E. engines show the M.A.C.E. logo.

  • Added: 16 new national-day logos to the main menu's date-aware logo rotation — Puzzle, Hot Chocolate, Groundhog, Pizza, Pi, Earth Day, Star Wars, Mother's Day, Donut, Father's Day, Ice Cream, S'mores, Coffee, Pickle, Oktoberfest, and Cookie. Each is shown for a 3-day window around its date.

  • Added: 13 character logos to the Logo Override picker — Air Force, Army, Astronaut, Bob Ross, Cop, Corporate, Government, Hipster, Marine, Paramedic, Sailor, Secret Service, and Space Force.

  • Added: Logo Override picker in Settings. When Holiday Logo is off, pick any seasonal, holiday, or national-day logo; when on, the picker displays the currently-active auto-rotation logo.

Compliance Editor Changes

No changes this release.

Build Hub Changes

  • Fixed: Build hub name and prefix fields (local build, Jamf, Workspace ONE, Intune) are now stored per-project in MACE_Project.mace instead of globally, preventing names from one project leaking into another. (User Requested)

  • Changed: Refreshed the "Required Access" buttons in the Jamf, Workspace ONE, and Intune tabs with a tinted pill background, chevron indicator, and pointing-hand cursor so they clearly read as clickable. (User Requested)

Audit Builder Hub Changes

No changes this release.

Documentation Builder Hub Changes

No changes this release.

Rule Builder Hub Changes

No changes this release.

Feedback Needed

Application rules are in alpha. These rules were derived from official CIS and DISA STIG sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules. Your feedback on application rule accuracy and usability is especially appreciated.

We'd love your help testing features to make sure everything works as expected.

If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.

Known Issues

  • mSCP Engines: I expect issues with the mSCP engines since they rely on the mSCP 2.0 Python scripts, which don't have everything fully mapped out yet.

  • mSCP Engines: Custom rules are not currently supported.

  • UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.

  • (Sequoia & Below): Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.

  • Console logging: May not capture all events. Logging is being improved incrementally as features are updated.

v0.1.2-beta

20 Apr 16:38
5748333

Choose a tag to compare

Main App Changes

  • Removed: The following Edge rules are not supported on macOS and have been removed from the CIS and STIG baselines:

    • edge_3p_serp_telemetry_enabled
    • edge_allow_import_of_data_from_other_browsers_on_each_microsoft_edge_launch
    • edge_allow_unconfigured_sites_to_be_reloaded_in_internet_explorer_mode
    • edge_allow_users_to_open_files_using_the_clickonce_protocol
    • edge_allow_users_to_open_files_using_the_directinvoke_protocol
    • edge_auto_update_check_period_override
    • edge_automatically_open_downloaded_mht_or_mhtml_files_from_the_web_in_internet_explorer_mode
    • edge_background_processing_must_be_disabled
    • edge_choose_whether_users_can_receive_customized_background_images_and_text_suggestions_notifications_and_tips_for_microsoft_services
    • edge_clear_history_for_ie_and_ie_mode_every_time_you_exit
    • edge_continue_running_background_apps_after_microsoft_edge_closes
    • edge_delete_old_browser_data_on_migration
    • edge_dynamic_code_settings
    • edge_enable_application_bound_encryption
    • edge_enable_browser_legacy_extension_point_blocking
    • edge_enable_gamer_mode
    • edge_enable_startup_boost
    • edge_enable_the_search_bar
    • edge_enhanced_security_mode_configuration_for_intranet_zone_sites
    • edge_force_microsoft_defender_smartscreen_checks_on_downloads_from_trusted_sources
    • edge_live_captions_allowed
    • edge_show_the_reload_in_internet_explorer_mode_button_in_the_toolbar
    • edge_specify_if_online_ocsp_crl_checks_are_required_for_local_trust_anchors
    • edge_standalone_sidebar_enabled
    • edge_update_policy_override_default
    • edge_wait_for_internet_explorer_mode_tabs_to_completely_unload_before_ending_the_browser_session
  • Fixed: Two Firefox location rules that were silently no-ops on macOS now behave correctly:

    • firefox_block_new_requests_asking_to_access_location
    • firefox_do_not_allow_preferences_to_be_changed
  • Changed: Application baselines (Chrome/Edge/Firefox) now live under MSCP_Project_Files/config/default/baselines/application/ alongside their application rules, keeping pristine defaults and user edits cleanly separated. MACE reads
    user edits from config/custom/baselines/ first and falls back to the default location.

  • Fixed: Main menu seasonal logos no longer shadow each other. Earth Day, Pride, Christmas, and Thanksgiving now display on their intended days instead of being overridden by neighboring holiday logos.

Compliance Editor Changes

  • Fixed: Opening an Application baseline no longer falsely flags non-listed rules as "Disabled." This prevents phantom disabled rules when bundled baselines and rule files drift out of sync due to renames.

Build Hub Changes

  • Fixed: Boolean values in generated Configuration Profiles now correctly render as <true/> / <false/> instead of <integer>1</integer> / <integer>0</integer>, producing valid .mobileconfig output for rules with boolean ODV
    values (e.g., Firefox extension updates, Chrome OCSP checks).

Audit Builder Hub Changes

No changes this release.

Documentation Builder Hub Changes

No changes this release.

Rule Builder Hub Changes

No changes this release.

Feedback Needed

Feedback Needed

Application rules are in alpha. These rules were derived from official CIS and DISA STIG sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules.
Your feedback on application rule accuracy and usability is especially appreciated.

We'd love your help testing features to make sure everything works as expected.

If you run into any issues or have ...

Read more

v0.1.1-beta

17 Apr 16:06

Choose a tag to compare

Main App Changes

  • Added: New "Application" platform for browser-based compliance rules (Chrome, Edge, Firefox) with CIS Level 1, CIS Level 2, and STIG baselines. Application rules are currently in alpha — see the in-app warning for details.

Compliance Editor Changes

  • Added: Application projects display an alpha warning sheet on open explaining the current state of application rules, their origins, and known limitations.
  • Changed: "View on GitHub" context menu option is hidden for application rules since they are not hosted in the mSCP repository.
  • Changed: mSCP engine is disabled for application projects across Build, Audit, and Documentation hubs. Only the native MACE engine is available.
  • Changed: Auto rule update check is skipped for application projects (no mSCP remote source).
  • Changed: CIS and STIG IDs now display correctly for application rules in the rules list.

Build Hub Changes

  • Added: Application platform support in Change Build — version picker shows Chrome, Edge, and Firefox; compliance picker shows CIS Level 1, CIS Level 2, and STIG.
  • Fixed: mSCP Engine flags -P and -G updated to --consolidated-profile and --granular-profiles to match mSCP 2.0 CLI changes.

Audit Builder Hub Changes

No changes this release.

Documentation Builder Hub Changes

No changes this release.


Rule Builder Hub Changes

No changes this release.

Feedback Needed

Application rules are in alpha. These rules were derived from CIS and DISA STIG official sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules. Your feedback on application rule accuracy and usability is especially appreciated.

We'd love your help testing features to make sure everything works as expected.

If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.

Known Issues

  • Application Rules (Alpha): Rules may or may not be included in the final MACE release. mSCP engine building is not supported for application rules.

  • mSCP Engines: I expect issues with the mSCP engines since they rely on the mSCP 2.0 Python scripts, which don't have everything fully mapped out yet.

  • mSCP Engines: Custom rules are not currently supported.

  • UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.

  • (Sequoia & Below): Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.

  • Console logging: May not capture all events. Logging is being improved incrementally as features are updated.