Description
You want tight control over what runs on this Mac — only approved programs allowed, everything else blocked. Santa does exactly that: it's a binary authorization system that decides per executable whether it may run, with allow and deny rules by signature, hash, or path.
Binary Authorization: Decides per executable whether it may run.
Allow & Deny Lists: Rules by code signature, hash, or path.
Two Modes: Monitor-only logging, or lockdown for approved only.
Features
Binary Authorization: Decides per executable whether it may run.
Allow & Deny Lists: Rules by code signature, hash, or path.
Two Modes: Monitor-only logging, or lockdown for approved only.
