SilentKnight is a Mac app from Howard Oakley (The Eclectic Light Co.) that fills a big gap in Apple’s Mac software, checking and displaying the status of Apple’s silent security updates — MRT, Gatekeeper, XProtect, TCC, the KEXT blocker, EFI firmware and System Integrity Protection (SIP) status.
LockRattler is an earlier app from the same developer with a less streamlined, more manual interface that may be preferable in certain cases, for example, if you don’t want to update all back-level versions of these Apple security components at once. Another related app, SystHist, offers a list of these security updates and versions that have been installed over time.
SilentKnight, LockRattler and SystHist are free downloads for OS X 10.11 and later.
To check your Mac, simply open [SilentKnight]. It then runs a series of automatic checks:
• whether your EFI firmware is current, against a list which I maintain for each model;
• settings of key security systems such as System Integrity Protection (SIP);
• security data files for MRT, Gatekeeper, XProtect, TCC, and the KEXT blocker, testing whether they are up to date;
• whether there are any security updates available from Apple.
If the answer to the last is that there are updates available, it provides a single button which will download and install them immediately.
… SilentKnight isn’t intended as a complete replacement for LockRattler, which offers similar coverage but without automatic comparison against expected results. LockRattler remains the preferred option when you need more flexibility, perhaps running deliberately with older EFI firmware, or only wanting to download and install certain named updates.
… SystHist is a clean and simple app which tells you all the OS X/macOS system and security updates which have been installed on that Mac. Now probes deep into protected territory to find even silent silent updates, and gives details of all the files updated.
SilentKnight 1.6 takes Apple’s abandonment of macOS 10.12 into consideration.