Main App Changes
- Fixed: Update installer now shows a helpful error when running from a DMG instead of a cryptic "volume is read only" message. (User Reported)
- Added: CMMC Level 3, HICP Large Practice (healthcare), and visionOS STIG from mSCP dev_2.0. Compliance list is manually maintained until dev_2.0 is merged to main.
- Fixed: Resolved duplicate window routing issues in Audit and Build that could cause unexpected behavior.
Compliance Editor Changes
No changes this release.
Build Hub Changes
No changes this release.
Audit Builder Hub Changes
- Changed: Export buttons consolidated into a single "Export" dropdown menu.
- Added: "Export All Formats…" option — name a folder and all four formats (PDF, HTML, JSON, CSV, XLSX) are exported into it at once.
- Removed: STIG Checklist option from the macOS menu bar — it's now available directly inside the app.
- Added: STIG Checklist Export sheet accessible from the audit footer (STIG projects only).
- Added: Fill-in Existing Checklist — load an existing DISA CKL (STIG Viewer 2) or CKLB (STIG Viewer 3) and MACE fills in your audit results.
- Added: Generate from DISA STIG Source — provide the official DISA STIG ZIP or XCCDF XML to generate a complete checklist from scratch.
- Added: JSON export format — available in the Export dropdown alongside PDF, HTML, CSV, and XLSX. (User Requested)
- Updated: Audit search now matches STIG ID, CIS ID, user comments, and status text in addition to rule title, ID, and section.
- Fixed: Audit checks for user-context rules (bluetooth_sharing_disable, hot_corners_secure, show_filename_extensions) now correctly resolve $CURRENT_USER when running via the privileged helper. (User Reported)
- Added: Profile Inspector — a read-only audit mode that compares MDM-deployed configuration profiles against compliance rule expectations without running scripts, viewable by rule or by preference domain.
Documentation Builder Hub Changes
No changes this release.
Rule Builder Hub Changes
No changes this release.
Feedback Needed
Application rules are in alpha. These rules were derived from official CIS and DISA STIG sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules.
Your feedback on application rule accuracy and usability is especially appreciated.
We'd love your help testing features to make sure everything works as expected.
If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.
Known Issues
- mSCP Engines: I expect issues with the mSCP engines since they rely on the mSCP 2.0 Python scripts, which don't have everything fully mapped out yet.
- mSCP Engines: Custom rules are not currently supported.
- UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.
- (Sequoia & Below): Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.
- Console logging: May not capture all events. Logging is being improved incrementally as features are updated.