A multi-platform binary whitelisting solution
Switch branches/tags
Nothing to show
Clone or download
Upvote Team and chief8192 An urgent bugfix and some ongoing cleanup:
- Fix for #23 (thanks due to thehesiod once again)

- The Bit9 syncing module (bit9_api) has been merged into the default Upvote module. Existing deployments should be able to delete any remaining instances of this module.

- Some refactoring of the web-facing request handlers needed for ongoing development efforts.

- Some cleanup of the Datstore backup handler.

PiperOrigin-RevId: 217751200
Change-Id: Ic5f900d0f824d7c5f86930883c2d0b789876f70c
Latest commit 589a1a7 Oct 18, 2018


Upvote Build Status

Upvote Icon

Upvote is a multi-platform binary whitelisting solution. It provides both a sync server and management interface for binary enforcement clients. Upvote currently supports Santa on macOS and Bit9 (now known as Carbon Black Protection) on Windows.


  • First-party sync server for Santa
    • Written in coordination with Santa's development team
  • User-oriented Policy Creation
    • Apply policies to users instead of hosts
    • No migration necessary when users get new hosts
  • BigQuery streaming
    • Fast, easy, and scalable relational access to Santa and Bit9 execution data
  • Bundled Voting for .app bundles on macOS
    • Easily create policy for an entire bundle at once
  • VirusTotal Integration
    • View VirusTotal results directly in the detail page


Voting page screenshot


See the docs page for full instructions.



We are current working hard to get Upvote ready for external contributions. However, at this time, we do not have the necessary approvals to do so.

In the meantime, please feel free to file GitHub issues or post in our Google Group, upvote-discuss, with any comments, bugs, or feature requests.


Core Contributors: Chief, Matthew

Special thanks to Danny, Haru, Maxim

And to the Santa team: Russell, Tom, Ed, Phillip


This is not an official Google product.