Hi Product Hunt! We built Nadhif to make security checks and developer cleanup easier to review, not to hide what changes.

Security first:

- This Mac checks settings including FileVault, firewall, sharing and SSH keys. Checking only reads; optional Fix actions show the commands and require your confirmation.

- Servers audits Debian/Ubuntu over SSH using your existing SSH setup. It checks risky settings and packages against known-vulnerability sources including CISA KEV. Findings include fix commands for you to run; Nadhif does not run server fixes.

- Websites checks sites you own after DNS TXT ownership verification: HTTPS, headers, exposed files, old libraries, and PHP/WordPress versions against NVD. Reads only by default. Active tests are separate opt-ins and can change data on the target.

Developer tools next: review old simulators, idle node_modules, installed packages and unused Docker data before removing anything.

Then the free cleaner: Smart Scan reads first, explains items, and leaves Review items unselected. Most cleaned items go to Recently Cleaned for 7 days. Trash, Docker items and package-manager removals are permanent; review the warning before confirming.

Cleaning, Uninstaller and Disk Map are free. Developer and Security tools have a 7-day trial with no payment details, then a one-time lifetime license for about $33, with no subscription. The license covers the current major version and its updates, on one Mac at a time.

About 12 MB. macOS 15+ on Apple silicon. Signed and notarized by Apple. No telemetry; online vulnerability checks and licensing do use network requests, as detailed in our Privacy Policy.

These checks can miss problems; they are not a guarantee that a system is secure. They are not a malware-removal or always-on protection service.

Which part of reviewing your own systems takes the most work: Mac settings, server findings, website findings, or developer leftovers?