Main App Changes
- Added: Search (⌘F) in Audit and Documentation preview panels — match highlighting, count, and next/previous navigation (all formats except XLSX/CSV, which are system-rendered)
- Added: Automatic Git setup for new projects — edits tracked, generated files ignored. Controlled by the new "Prepare New Projects for Git" setting (on by default), with File ▸ Make Project Git-Ready for existing projects; it never overwrites your customizations
- Added: Beta OS versions from mSCP dev branches (e.g. macOS 27) with a pre-release warning — off by default, enable via "Show mSCP Beta Versions" in Settings
- Added: "All Rules" now warns at project creation that it isn't a validated benchmark and may produce conflicting settings
- Added: 30 new icons (80 total), a Download All Icons button, and a Random icon option
- Added: Hidden uninstaller.sh in the app bundle (Contents/Resources) that fully removes MACE while leaving project folders untouched
- Added: macOS 26 & iOS 26 STIG documentation links
- Changed: Update checker now supports numbered betas (e.g. 1.1.0-beta.1, 1.1.0-beta.2)
- Changed: Compliance frameworks and OS versions are now pulled live from mSCP instead of a static list, with friendly display names
- Changed: Compliance pickers reorganized into "Benchmarks & Frameworks" and "Tags" sections, with "All Rules" set apart
- Changed: Settings redesigned with a sidebar layout (General, Appearance, Advanced, Updates), per-setting "Restore Default" buttons, per-tab and Reset All options, and the new MACE mascot
- Fixed: "All Rules" compliance previously produced an empty rule list and baseline — it now includes every rule for the selected macOS version
- Fixed: Blurry engine-selection logos and About-window logo — now sharp, with uniform dimming when unselected
- Fixed: Update and info dialogs slowly flying in from the top-left corner on macOS 27
- Fixed: XLSX column widths clipping bold uppercase headers in Audit and Documentation exports
- Fixed: 9 broken/outdated documentation links and unreachable iOS STIG links; removed inaccessible CMMC/CNSSI hyperlinks (citations remain as text)
Compliance Editor Changes
- Added: "Has ODV" option in the Filter dropdown for quickly finding rules with Organization Defined Values (User Requested)
- Added: Open-in-Finder button in the sidebar to open the project folder directly in Finder
Build Hub Changes
- Added: Iru Direct Export — push profiles, the audit exemption profile, the compliance script, an optional Failed Rules Report, and the offline script package straight to Iru, with API token auth, Blueprint assignment, and in-place upserts
- Added: Fleet DM Direct Export — push profiles, the audit exemption profile, the compliance script, an osquery compliance policy (plus "Failed Rules" query), and the offline script package straight to Fleet, with team scoping
- Added: Addigy Direct Export — push profiles, the audit exemption profile, the compliance script, a Compliance Status Custom Fact, and the offline script package straight to Addigy, with policy assignment and in-place upserts (User Requested)
- Added: Space-sensitivity warning and live filename preview for Intune naming fields
- Changed: All "Kandji" branding is now "Iru" — scripts renamed to iru_* (kandji_* still recognized from older build folders) (User Requested)
- Changed: Intune names are now space-free (e.g. MACE_Configuration_Profiles); existing projects with spaced names migrate automatically on load
- Changed: MDM passwords and API tokens no longer trigger macOS "Save password?" prompts, and Workspace ONE credential storage is more secure
- Fixed: Duplicated projects shared PayloadIdentifiers, causing Jamf to stop communicating with devices — profiles now embed a stable per-project token with deterministic PayloadUUIDs, and duplicates get a fresh identity
- Fixed: CURRENT_USER detection in compliance scripts now matches mSCP's lastUserName method
- Fixed: # References: comments in compliance scripts now include all mSCP frameworks, sorted alphabetically
- Fixed: Intune rejecting uploads due to spaces in names — profile, audit, and Local Build XML file names are now made space-free automatically
- Fixed: Audit preferences and individual-mode profiles uploaded to Intune as custom profiles devices couldn't install — they now upload as real Preference file profiles, with settings visible and editable in the Intune portal
- Fixed: In Intune individual mode, the time server setting and password policy never actually enforced — time server now exports as com.apple.timed.xml, and passcode policy uploads as its own .mobileconfig (profile-only per Apple's spec)
- Fixed: Pasting a full URL into an MDM server field no longer produces a broken https://https://… address (User Reported)
- Fixed: iOS/visionOS Jamf Compatible profiles failing to import into Jamf Pro — mobile profiles now use native payloads instead of the macOS-only MCX wrapper
Audit Builder Hub Changes
- Added: "Has ODV" option in the Filter dropdown for quickly finding rules with Organization Defined Values (User Requested)
- Added: Audit comments are saved to the project and preserved between scans (toggle in Settings, on by default); commented rules show a blue "Comment" pill, with orange "Modified" now reserved for actual data overrides (User Requested)
- Added: Modified-rule indicator for exports (HTML, PDF, CSV, XLSX, JSON, CKL/CKLB) with a "Show Modified Indicator" toggle (User Requested)
- Added: Markdown and AsciiDoc export formats — full export settings, live preview, and inclusion in Quick Export and Export All
- Changed: Save Last Audit now stores the audit inside the MACE_Project.mace file instead of a separate file
- Fixed: Custom logo was missing from Audit exports until the window was closed and reopened — it now appears in the first export (User Reported)
Documentation Builder Hub Changes
- Added: Modified-rule indicator for exports (HTML, PDF, Markdown, AsciiDoc, CSV, XLSX, JSON) with a "Show Modified Indicator" toggle (User Requested)
Rule Builder Hub Changes
No changes this release.
Feedback Needed
Application rules are in alpha. These rules were derived from CIS and DISA STIG official sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules.
Your feedback on application rule accuracy and usability is especially appreciated.
We'd love your help testing features to make sure everything works as expected.
If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.
Known Issues
- UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.
- Sequoia & below: Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.
- Console logging: May not capture all events. Logging is being improved incrementally as features are updated.