Alternatives to BlockBlock

A macOS tool that alerts you whenever software adds itself to a persistence location. The listings below can replace it for an important use case. Each note says what changes if you switch.

The original

Replacements

Listings that take over the same core job as BlockBlock.

  • KnockKnock

    Lists the software configured to persist on a Mac.

    KnockKnock lists software configured to persist on a Mac and cross-checks it against VirusTotal, reporting rather than alerting in real time.

  • Santa

    A binary and file access authorization system for macOS that allows or blocks executables.

    FreeProprietarymacOS

    Santa is a macOS binary authorization system that allows or blocks executables, aimed at managed fleets.

  • RansomWhere?

    A macOS utility that detects processes encrypting files like ransomware and stops them for review.

    FreeProprietarymacOS

    RansomWhere? detects processes encrypting files like ransomware and stops them for review, a behavioural guard rather than a persistence monitor.

  • OverSight

    Receive macOS alerts about microphone and camera activity.

    OverSight alerts on macOS microphone and camera activity rather than watching persistence locations.

Similar software

Related functionality, not a direct replacement.