BlockBlock for macOS

What is BlockBlock?

BlockBlock watches common persistence locations on your Mac and alerts when a new persistent component is added. An alert identifies the responsible process and the startup file or item involved, helping you decide whether to allow the change or block it. Blocking removes the persistent item from the file system; allowing or blocking normally creates a rule so the choice can be remembered. A temporary response avoids creating that rule.

The alert offers access to code-signing details, VirusTotal results and process ancestry. You can review or delete saved rules from the status-bar menu. Optional protections include checks on non-notarized programs, blocking downloaded scripts and alerts for content pasted into Terminal. Paste Protection can apply heuristics to limit blocking to pastes it considers suspicious.

An alert is not a malware verdict: legitimate applications also install persistent components. You need to examine the process and item before approving a change. BlockBlock requires system privileges and Full Disk Access for its monitoring, while Paste Protection additionally needs Accessibility permission for its helper. The download linked here is the publisher's version 2.5.2 ZIP, containing the installer application; the screenshot is a publisher-provided illustrative alert, not a capture of this package running in our environment.

Product images