Your team fixes their Macs. You get the proof.

Each person fixes their own Mac in one click or one guided step. ViseMon records every fix and turns it into proof for the questionnaire, the auditor and the insurer. No MDM, no chasing.

Sign up for beta See the proof

Free for up to 5 Macs · About 90 seconds per Mac · Hosted in the EU

“Does the company encrypt every laptop?” Yes / No

Sooner or later someone asks. It shows up in four places, worded four ways, and each one wants proof, not a promise. The usual answer is an MDM (mobile device management): software an IT person sets up to control every Mac.

SIG LiteRow 132

Is data on laptops and desktops encrypted at rest?

YesNoevery Mac, timestamped
SOC 2Control CC6.1

Is data at rest on endpoints encrypted, and can you show it for the whole period?

YesNoevery Mac, timestamped
Series A diligenceSecurity §4

Do all company laptops use full-disk encryption?

YesNoevery Mac, timestamped
Cyber insuranceQuestion 3

Are all laptops and portable devices encrypted?

YesNoevery Mac, timestamped
An MDMA project, then someone's job
Enrol every Mac
Write profiles
Test
Run it, ongoing
  • Getting startedEnrol every Mac, build profiles, test them
    –
  • Who runs itSomeone who knows MDM, ongoing
    –
  • How settings changeEnforced remotely
    –
  • Proof for the questionnaireYou build the report
    –
  • Can wipe or lock a laptopYes
    –
ViseMonOne link, then nothing to run
Send one link
People fix their own Macs. You watch it land.
  • Getting startedSend one link
    ✓
  • Who runs itNobody. Each person fixes their own Mac
    ✓
  • How settings changeThe person clicks; ViseMon confirms
    ✓
  • Proof for the questionnaireOne-page export, ready the same day
    ✓
  • Can wipe or lock a laptopNo, by design
    ✓

Already run an MDM? Keep it. ViseMon handles the part an MDM doesn’t: it helps each person fix their own Mac with smart tasks and step-by-step guidance, so they know what’s happening and why. You see each fix land, with who did it and when.

They fix it in one click.

A read-only checker tells you what failed. ViseMon gets it fixed and records who fixed it and when.

ViseMon never asks for anyone's password.

FinderFileEdit09:12

What Priya sees in the menu bar. Try Update now and Turn On: each fix lands in Handled, moves the score, and shows up in your log.

What you see on your side
  1. Priya Nair turned off automatic loginViseMon changed it, on her click
  2. Leo Fischer turned on the firewallViseMon changed it, on his click
  3. Mei Tanaka installed macOS 27.0.1She clicked Update tonight; ViseMon confirmed it
  4. Jonas Berg turned on FileVaultHe switched it on; ViseMon confirmed it

Every fix lands here, and in the export, with who did it and when.

ViseMon changes it for you

One click in the app. ViseMon does the work.

  • Firewall on
  • Automatic login off
  • Remote login off
  • Automatic macOS updates on
  • Apps current, on click. Chrome, Slack, Zoom, over a thousand others
ViseMon opens the right setting, you switch it on, ViseMon confirms

macOS does not let any app change these for you without an MDM.

  • FileVault (disk encryption) on
  • macOS current
  • Screen lock
  • Password after sleep
  • Find My on
All of it recorded, with the time it was checked.

It keeps their Mac working, every day.

Every screen on this page shows example data from Northwind, a 30-Mac team.

Out-of-date apps are a common way in. One click closes it.

A browser, a chat app or a PDF reader with a known, already-fixed hole. ViseMon keeps Chrome, Slack, Zoom and over a thousand others current. The person ticks what's waiting and clicks once; ViseMon downloads each update, checks the developer's signature and installs it. No App Store account, no admin password, no MDM.

Security fixes go first, then anything that's crashing. Every update lands in the record, so "are patches applied?" has an answer for every Mac.

The Apps page. Tick the apps, press Update, and watch them download, install and reopen.

The things people notice, with a fix attached.

Battery health, free space, memory pressure, days since the last restart, app crashes. ViseMon turns the ones that matter into a task: restart, free up space, get the battery checked.

XcodeFileEdit14:12
The Vitals tab. Click CPU, Memory, Wi-Fi or Battery.

Ask it why: "my Mac is slow."

They type what is wrong in their own words. ViseMon reads what it already knows about that Mac and answers with the task that fits, or says what the data shows and offers to flag it for you.

It can only offer tasks from the list. It never writes a script, never runs anything on its own, and never asks for a password. When it needs a closer look, such as an app's crash reports, it asks first, and nothing leaves the Mac unless the person sends it.

The ViseMon Assistant on the person's Mac.

Every person can read the whole list in the app. So can you, right here.

This isn’t a setting you can turn off: there is no collector for anything on the left. ViseMon never asks for Screen Recording, Accessibility or Input Monitoring. Your data stays in the EU.

33 checks on every Mac. None of them looks at a person.

Every person sees the full list in the app, at any time. Install needs one approval; three permissions are optional and asked one at a time, never at install.

  • Login ItemsRequired. Lets the helper run in the background.
  • Full Disk AccessOptional. Lets the helper confirm its own access.
  • LocationOptional. macOS needs it to read the Wi-Fi network name, and only if your organisation turns that on.
  • NotificationsOptional. To tell the person when something needs them.

Skip an optional one and its checks grey out, with the reason.

You never chase anyone.

They get one prompt. You get one email.

No nagging.

ViseMon speaks up only when their Mac needs something, at most once an hour. One small window, one click. Never a blurred screen, never a lockout. Anyone who keeps snoozing shows up by name in your Monday email.

MailFileEdit16:30
What Alex sees: one notification, then nothing until it's done. At most one an hour, never in quiet hours, none for what ViseMon fixes itself.

You get one email, on Monday.

How many Macs are compliant, who is not, and how often they were reminded. What fixed itself last week. Which Macs stopped reporting.

You never have to open a dashboard. When everything is green, the email is two lines long, so you know it is still working.

The Monday email. When everything is green, it's two lines long.

Ask it anything: "which Macs aren't encrypted?"

Ask in plain words. The answer names the Macs, the people, and the dates, and every line links to the check behind it. "Are we ready for the laptop section of SOC 2?" gets you the gaps, and the name behind each one.

"Export this for the insurance form" gives you the one-page answer scoped to exactly that. On the Compliance tier.

Every answer names the Macs and the check it came from. It never runs anything on a Mac.

You prove it in one page.

33 checks, mapped to four frameworks and your insurance form. Pick one to see every laptop control it asks about, the checks that answer it, and where a team stands today. Each card is one section of the export.

NorthwindDevice controls evidence
Period 1 Jul – 30 Sep 2026Generated 30 Sep 2026, 10:58 CESTPage 1 of 5
AnswerYes, with exceptions27 of 30 Macs meet every control. Three exceptions named below, each with a task open.
30Macs
33checks each
92days covered
ControlWhat was checkedMacs passing
SOC 2 CC6.1ISO A.8.24 · CE 4FileVault on with a recovery key, screen lock, password after sleep27/30
SOC 2 CC6.6ISO A.8.1 · CE 1Firewall on, remote login and sharing off29/30
SOC 2 CC7.1ISO A.8.8 · CE 3macOS within 14 days, apps current, automatic updates on30/30
MacPersonEncryptUpdateLockFirewallRead
alex-mbp14A. Rivera10:58
jonas-mba15J. Berg10:58
leo-miniL. Fischer10:58
mei-mbp14M. Tanaka10:58
priya-mbp16P. Nair10:58
sam-mba13S. Okafor10:58
+ 24 more Macs28/3030/3029/3029/30
Exceptions

Priya Nair, FileVault off since 14 Sep, reminded twice, task open. Leo Fischer, FileVault and firewall off since 16 Sep, reminded once, task open. Jonas Berg, screen lock off since 28 Sep, due Friday.

Every Mac, every check, the time it was read.SHA-256 4f2a 9c1e … 7d0b

The one-page export: what the questionnaire, the auditor and the insurer get.

SOC 2

Five laptop controls an auditor tests. 2 of 5 met on every Mac.

  • Encryption and sign-inFileVault, screen lock, passwords
    27/30 MacsCC6.1
  • Network and sharingFirewall on, sharing off
    29/30 MacsCC6.6–6.7
  • Malware protectionGatekeeper, XProtect
    29/30 MacsCC6.8
  • UpdatesmacOS and apps current
    30/30 MacsCC7.1
  • MonitoringEvery Mac reporting in
    30/30 MacsCC7.2
Example: Northwind, 30 Macs. Amber rows name the Macs to fix in the export.
ISO 27001

Six Annex A controls that touch a laptop. 1 of 6 met on every Mac.

  • Laptops securedThe baseline settings
    27/30 MacsA.8.1
  • Sign-inPasswords, no automatic login
    29/30 MacsA.8.5
  • Malware protectionGatekeeper, XProtect
    29/30 MacsA.8.7
  • UpdatesmacOS and apps current
    30/30 MacsA.8.8
  • BackupsTime Machine on and encrypted
    24/30 MacsA.8.13
  • EncryptionFileVault, passphrased SSH keys
    28/30 MacsA.8.24
Annex A, 2022 edition. Backups and SSH keys are where teams usually fall short.
CIS

Four sections of the macOS benchmark. 2 of 4 met on every Mac.

  • UpdatesmacOS and apps current
    30/30 Macs§1
  • Sharing and networkRemote login, file and screen sharing off
    30/30 Macs§2.1–2.5
  • Security and privacyFind My, Gatekeeper, Location settings
    24/30 Macs§2.6–2.11
  • Accounts and sign-inNo admin day to day, screen lock
    29/30 Macs§5
CIS macOS Benchmark, Level 1.
Cyber Essentials

The five technical controls. 1 of 5 met on every Mac.

  • FirewallOn, on every Mac
    29/30 Macs1
  • Secure settingsAutomatic login off, no password hints
    29/30 Macs2
  • UpdatesWithin 14 days of release
    30/30 Macs3
  • User accessNo admin day to day, a password manager
    29/30 Macs4
  • Malware protectionXProtect current
    29/30 Macs5
UK government scheme, required for many public-sector contracts.
Cyber insurance

The three laptop questions on the form. 1 of 3 met on every Mac.

  • Are laptops encrypted?FileVault on
    28/30 MacsQ3
  • Are patches applied?macOS and apps current
    30/30 MacsQ4
  • Is there endpoint protection?XProtect, a security agent
    29/30 MacsQ5
Yes, with exceptions, and the exceptions named. That is the answer you sign.
Northwind · 30 Macs · example data. ViseMon fixes, or walks the person through, 10 of these checks. The other 23 it reads and reports, so you always know where each Mac stands. See which ten
All 33 checks, by category

Security settings

10 checks
  • FileVault (disk encryption)
  • Firewall
  • Gatekeeper
  • System Integrity Protection
  • Screen lock
  • Automatic login off
  • Remote login off
  • Screen sharing off
  • Automatic macOS updates
  • Find My

Updates and apps

4 checks
  • macOS updates available
  • XProtect version
  • Installed apps and versions
  • Browsers

How the Mac runs

10 checks
  • Uptime and last restart
  • Boot to login time
  • App crashes, 7 days
  • Memory pressure
  • Thermal pressure
  • CPU load
  • Hardware temperature
  • Battery health
  • Wi-Fi signal
  • Wi-Fi network name (only with Location)

The device

9 checks
  • Model
  • Serial number
  • Hardware ID
  • Chip, cores and memory
  • Storage capacity
  • macOS version
  • Local hostname
  • Enrolment identity
  • ViseMon’s own permissions

Free for up to 5 Macs. Per Mac after that.

Three tiers, no add-ons. Free covers a small team before anyone has asked. Base lets you set the rules. Compliance gives you the proof.

Free
€0
up to 5 Macs
  • All 33 checks
  • Every fix, one click each
  • Apps stay updated, over a thousand recognised
  • A prompt only when something needs fixing
  • Ask it: each person describes a problem, gets a task
  • See every Mac

For 5 Macs or fewer, before anyone has asked.

Base
€5
per Mac per month
  • Everything in Free
  • Set your own policy: which checks, deadlines, snooze rules
  • Choose which apps update
  • Quiet hours for prompts
  • The Monday email

For teams past 5 Macs, where one person sets the rules and nobody chases.

Compliance
€15
per Mac per month
  • Everything in Base
  • Required checks: the prompt returns until done
  • The one-page export, every Mac, every check, timestamped
  • Mapped to SOC 2, ISO 27001, CIS, Cyber Essentials and the insurance form
  • History: what failed, since when
  • Vanta and Drata: evidence pushed for you
  • Ask it about your Macs, get the Macs behind the answer
  • Audit log export

For teams that have to prove it: to a customer, an insurer, an auditor or an investor.

Free during the beta. Everything in Compliance. Prices exclude VAT.
Managing Macs for clients? Ask about partner pricing at beta@visemon.com
Not an MDM. Nothing to run, no profiles, works on Macs already in people's hands.

One link. Ninety seconds of their time, none of yours.

There is no agent to package and no profile to push. Each person opens the link on their own Mac, and it starts reporting. You do nothing per machine.

1 / Send

Send one link

Email it, or post it in Slack or on the wiki. One link for the whole company.

1 link for the whole company, not per machine
2 / Install

They install it (90 seconds)

They run the installer, allow ViseMon in Login Items, and sign in with their work email. macOS asks for an administrator's password once, when ViseMon is approved in Login Items. No admin rights? Whoever holds them enters it; ViseMon never sees it.

~90 sec once per Mac, then never again
3 / Read

Watch them arrive

Macs appear as people install. Checks turn green as people click. The export is ready the same day.

~15 min from first link to a full record

Fifteen answers. None of them marketing.

If an answer here is wrong, that's a defect: write to beta@visemon.com and we'll fix it within the week.

Compliance and your MDM

Do I need an MDM for SOC 2, ISO 27001 or Cyber Essentials?

No. None of them require an MDM. They require that every laptop is encrypted, current, locked and monitored, and that you can prove it for the whole audit period. ViseMon reads those settings, gets each person to fix their own Mac, and produces the evidence. If you already have an MDM, they work together.

Apple's MDM is free. Why not that?

You can, if someone will run it: set it up, enrol every Mac, write and maintain the profiles, and hold the power to wipe a laptop. On a twenty-person team nobody wants that job, and an MDM still does not produce the per-Mac, per-check evidence an auditor asks for. ViseMon is one link, people keep their Macs as they are, you get the proof.

Does cyber insurance require an MDM?

No. The application asks whether laptops are encrypted, whether updates are applied, and whether endpoint protection is installed. Then you sign it. ViseMon gives you the per-Mac evidence for all three before you do.

What does a SOC 2 auditor check on laptops?

Disk encryption on, screen lock with a short timeout, macOS current, automatic updates on, and malware protection installed, across every laptop and across the whole period, not one screenshot. The export lists every Mac, every check and the time it was checked, mapped to the control it answers.

How do I prove FileVault is enabled on every Mac?

ViseMon reads it directly on each Mac and records it with a timestamp. The export shows every Mac, on or off, and since when. Auditors treat that differently from a screenshot: it covers the period, not the day you took the picture.

We already use Vanta or Drata. Why this?

Keep them. Their agent reads the Mac and reports what failed. ViseMon gets each Mac fixed, records who did it and when, and hands them the evidence.

Does it work alongside our MDM?

Yes. ViseMon installs no configuration profiles and can't lock or erase a Mac, so it doesn't compete with your MDM. It reads the same settings and adds the record of who fixed what, and when.

Your people and their Macs

Do my people need admin rights to install it?

Yes, once per Mac. macOS asks for an administrator's password when ViseMon is approved in Login Items, so the helper can run. On a standard account, whoever holds admin rights enters it. macOS asks, not ViseMon, and ViseMon never sees it.

Will it change things on people's Macs without asking?

No. Every change is a click the person makes. Five settings ViseMon changes when they click. Five, including FileVault and macOS updates, it opens the right pane for and confirms when they have flipped it. macOS does not let any app do those on someone's behalf without an MDM, and ViseMon never asks for a password to get around that.

What if someone keeps snoozing?

You see it on Monday: who, since when, how many reminders. On Compliance, a required check returns to their screen until it is done. ViseMon never locks anyone out and never blocks sign-in. A name and a date is what gets it fixed.

Can it read their files or their browsing?

No. There is no collector for either. The list of what is never collected is on this page, and every person can read it in the app.

Is there AI in it, and what does it see?

Yes, two places. The person can describe a problem and get a task; you can ask a question about your Macs and get an answer with the Macs behind it. Both only see the same checks the person can already read in the app. Neither can write a script or run anything on its own; the only thing either can do is offer a task from the list, and you click it.

What happens when someone leaves?

Remove their Mac in the console. Its open tasks close, it stops reporting, and it stops counting toward your plan. Its history stays in your records: raw readings for 30 days, summaries for 5 years.

Which Macs does it run on?

macOS 15 Sequoia or later, on Apple silicon and Intel.

What about Windows?

Macs today. Windows is coming.

Get beta access within one working day.

Request a free beta account. We are in beta and onboard a few teams a week. Someone on the team reads every request. If someone has asked you for proof this month, say so below and you go first.

What beta means here. Every check and fix on this page already runs on real teams’ Macs. Your data is encrypted and stays in the EU. Beta means new features keep arriving, shaped by what beta teams tell us.
Free while we are in beta. After it, free up to 5 Macs, then per Mac.
Talk to a person. beta@visemon.com. The people who build ViseMon answer every email themselves.