KnockKnock 4.1.0 for Mac

Mac Utilities

Updated Aug 13, 2026

⬇ Download Now

KnockKnock is a free Objective See tool that answers one question: what runs automatically on your Mac? Malware stays useful by persisting, launching again at every login or restart. KnockKnock scans the known places where persistent software hides, from launch agents and login items to browser extensions and cron jobs, and lists everything it finds in one window. Each item shows its path and signing status, and binaries can be checked against VirusTotal.

Key Features

• Scans launch agents, launch daemons, login items, extensions and other persistence spots
• Shows each item with its full path, icon and code signing status
• Checks executable files against VirusTotal and highlights known malware in red
• Save scan results as a file and compare later scans to spot new or changed items
• Command line mode for scripted scans, plus an option to scan at every login

How to Download

1. Click the download button on this page and save the KnockKnock archive to your Mac.
2. You can also Download from the official site to get the tool straight from Objective See.
3. Open the archive and double click KnockKnock.app, grant Full Disk Access, then press Start Scan.

System Requirements

KnockKnock needs macOS 10.15 or later. There is nothing to install; you run the app from wherever you keep it and delete it when done.

FAQs

Does an item in the list mean my Mac is infected?

No. Most persistent items are normal software. KnockKnock simply lists them all. Check the signer and the VirusTotal result before worrying.

Does KnockKnock remove malware?

No. It reveals persistent items and flags known malware, but removal is up to you. Its job is to show you exactly what runs automatically.

Is KnockKnock free?

Yes. It is a free open source tool from the Objective See Foundation, created by Patrick Wardle.