This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
Verity is a native macOS app that watches the places installers touch: shell startup files, SSH, LaunchAgents and executable folders. Every change comes with a severity score, the reasons behind it, the possible process chain, and an encrypted history you can bring back. Optional Protect asks before selected new or changed executables run: Block, Allow Once, or Always Trust. Local-first, no telemetry. macOS 15+, signed and notarized. 7-day free trial.
It was under unusually heavy load, and I found a lot of `find` processes searching for
credentials. I disconnected it, then discovered
an executable called download in /usr/local/bin
and commands to run it added to my .zshrc and .bashrc.
I suspect an npm package, but I still don't know for sure. I had to search for those
changes myself before I could understand how it was being launched.
That was me typing every command. Today a growing share of what lands on a dev Mac was
never typed by a human: an agent runs brew install, npm i -g, curl … | sh while
you're reading the diff. The install is a line in a transcript you skim.
So I built the tool I wish I'd had running:
-Watch the sensitive places: shell startup files, SSH configuration,
LaunchAgents/Daemons, /usr/local/bin and /opt/homebrew/bin, which is exactly where
an agent's installs land.
- Every change, explained: a severity from 0–100, the reasons behind it, the file
changes, and the possible process chain when attribution is available.
- Bring a version back: eligible file contents are kept in an AES-256 encrypted vault,
key in your macOS Keychain. You see the shell profile diff line by line, and can restore it.
- Optional Protect: asks before selected new or changed executables in your monitored
folders run: Block, Allow Once, or Always Trust.
What it isn't: an antivirus, and not a sandbox for your agent. It records a baseline and shows you what changed from there; severity helps you prioritize a review, it's not a malware probability.
To be precise about the limit: a malicious npm `postinstall` running under `node` isn't an execution Verity can gate — but the binary it drops in a watched folder, the line it appends to your .zshrc, and the LaunchAgent it writes are all changes you'll see.
Monitoring data and the vault stay on your Mac, and there's no telemetry.
Native macOS 15+, Apple silicon & Intel, signed and notarized. 7-day free trial, no card; then a one-time $39 for one Mac ($69 for three) as an early-adopter price for the first 100 of each, $49 / $89 after that.
I'd love your feedback, especially on which folders you'd want watched next, the per-user
bin directories (~/.local/bin, ~/.cargo/bin, ~/go/bin) are top of my list.
We tends to let AI do so much things without worrying and knowing what it does. Will definitely try it
Good luck for the launch!
About Verity on Product Hunt
“Know what changed on your Mac.”
Verity was submitted on Product Hunt and earned 11 upvotes and 4 comments, placing #42 on the daily leaderboard. Verity is a native macOS app that watches the places installers touch: shell startup files, SSH, LaunchAgents and executable folders. Every change comes with a severity score, the reasons behind it, the possible process chain, and an encrypted history you can bring back. Optional Protect asks before selected new or changed executables run: Block, Allow Once, or Always Trust. Local-first, no telemetry. macOS 15+, signed and notarized. 7-day free trial.
Verity was featured in Mac (103.7k followers), Developer Tools (519.8k followers) and Security (2.9k followers) on Product Hunt. Together, these topics include over 100.3k products, making this a competitive space to launch in.
Who hunted Verity?
Verity was hunted by Sébastien Gruhier. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how Verity stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
Sébastien Gruhier
Verity started with an incident on my own Mac.
It was under unusually heavy load, and I found a lot of `find` processes searching for
credentials. I disconnected it, then discovered
an executable called download in /usr/local/bin
and commands to run it added to my .zshrc and .bashrc.
I suspect an npm package, but I still don't know for sure. I had to search for those
changes myself before I could understand how it was being launched.
That was me typing every command. Today a growing share of what lands on a dev Mac was
never typed by a human: an agent runs brew install, npm i -g, curl … | sh while
you're reading the diff. The install is a line in a transcript you skim.
So I built the tool I wish I'd had running:
-Watch the sensitive places: shell startup files, SSH configuration,
LaunchAgents/Daemons, /usr/local/bin and /opt/homebrew/bin, which is exactly where
an agent's installs land.
- Every change, explained: a severity from 0–100, the reasons behind it, the file
changes, and the possible process chain when attribution is available.
- Bring a version back: eligible file contents are kept in an AES-256 encrypted vault,
key in your macOS Keychain. You see the shell profile diff line by line, and can restore it.
- Optional Protect: asks before selected new or changed executables in your monitored
folders run: Block, Allow Once, or Always Trust.
What it isn't: an antivirus, and not a sandbox for your agent. It records a baseline and shows you what changed from there; severity helps you prioritize a review, it's not a malware probability.
To be precise about the limit: a malicious npm `postinstall` running under `node` isn't an execution Verity can gate — but the binary it drops in a watched folder, the line it appends to your .zshrc, and the LaunchAgent it writes are all changes you'll see.
Monitoring data and the vault stay on your Mac, and there's no telemetry.
Native macOS 15+, Apple silicon & Intel, signed and notarized. 7-day free trial, no card; then a one-time $39 for one Mac ($69 for three) as an early-adopter price for the first 100 of each, $49 / $89 after that.
I'd love your feedback, especially on which folders you'd want watched next, the per-user
bin directories (~/.local/bin, ~/.cargo/bin, ~/go/bin) are top of my list.
Thanks for checking it out! 🙏