Nadhif - Check Mac, server and website security
by•
Check Mac security settings, audit Debian/Ubuntu servers over read-only SSH, and inspect websites you own after DNS verification. Then clear developer clutter and use the free cleaner with 7-day restore for most items. Developer and Security tools: about $33 for a lifetime license, no subscription, 7-day trial. macOS 15+, Apple silicon, ~12 MB.
Replies
Hi Product Hunt! We built Nadhif to make security checks and developer cleanup easier to review, not to hide what changes.
Security first:
- This Mac checks settings including FileVault, firewall, sharing and SSH keys. Checking only reads; optional Fix actions show the commands and require your confirmation.
- Servers audits Debian/Ubuntu over SSH using your existing SSH setup. It checks risky settings and packages against known-vulnerability sources including CISA KEV. Findings include fix commands for you to run; Nadhif does not run server fixes.
- Websites checks sites you own after DNS TXT ownership verification: HTTPS, headers, exposed files, old libraries, and PHP/WordPress versions against NVD. Reads only by default. Active tests are separate opt-ins and can change data on the target.
Developer tools next: review old simulators, idle node_modules, installed packages and unused Docker data before removing anything.
Then the free cleaner: Smart Scan reads first, explains items, and leaves Review items unselected. Most cleaned items go to Recently Cleaned for 7 days. Trash, Docker items and package-manager removals are permanent; review the warning before confirming.
Cleaning, Uninstaller and Disk Map are free. Developer and Security tools have a 7-day trial with no payment details, then a one-time lifetime license for about $33, with no subscription. The license covers the current major version and its updates, on one Mac at a time.
About 12 MB. macOS 15+ on Apple silicon. Signed and notarized by Apple. No telemetry; online vulnerability checks and licensing do use network requests, as detailed in our Privacy Policy.
These checks can miss problems; they are not a guarantee that a system is secure. They are not a malware-removal or always-on protection service.
Which part of reviewing your own systems takes the most work: Mac settings, server findings, website findings, or developer leftovers?