<!--
{
  "availability" : [
    "macCatalyst: 13.0.0 -",
    "macOS: 10.15.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "EndpointSecurity",
  "identifier" : "/documentation/EndpointSecurity",
  "metadataVersion" : "0.1.0",
  "role" : "Library",
  "symbol" : {
    "kind" : "Library",
    "modules" : [
      "Endpoint Security"
    ],
    "preciseIdentifier" : "EndpointSecurity"
  },
  "title" : "Endpoint Security"
}
-->

# Endpoint Security

Develop system extensions that enhance user security.

## Overview

Endpoint Security is a C API for monitoring system events for potentially malicious activity. You can write your client in any language that supports native calls. Your client registers with Endpoint Security to authorize pending events, or receive notifications of events that already occurred. These events include process executions, mounting file systems, forking processes, and raising signals.

Develop your system extension with Endpoint Security and package it in an app that uses the <doc://com.apple.documentation/documentation/SystemExtensions> framework to install and upgrade the extension on the user’s Mac.

## Topics

### Event Monitoring

[Client](/documentation/EndpointSecurity/client)

An opaque type that maintains Endpoint Security client state, and functions related to this type.

[Message](/documentation/EndpointSecurity/message)

A type used by Endpoint Security to notify your client when a monitored action occurs.

[Event Types](/documentation/EndpointSecurity/event-types)

Types used by messages to deliver details specific to different kinds of Endpoint Security events.

[Monitoring System Events with Endpoint Security](/documentation/EndpointSecurity/monitoring-system-events-with-endpoint-security)

Receive notifications and authorization requests for sensitive operations by creating an Endpoint Security client for your app.

### Entitlements

  <doc://com.apple.documentation/documentation/BundleResources/Entitlements/com.apple.developer.endpoint-security.client>

### Reference

[EndpointSecurity Constants](/documentation/EndpointSecurity/endpointsecurity-constants)

[EndpointSecurity Data Types](/documentation/EndpointSecurity/endpointsecurity-data-types)

[EndpointSecurity Functions](/documentation/EndpointSecurity/endpointsecurity-functions)

[EndpointSecurity Structures](/documentation/EndpointSecurity/endpointsecurity-structures)

[EndpointSecurity Enumerations](/documentation/EndpointSecurity/endpointsecurity-enumerations)


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)