Mergen

Mergen checks a Mac against 85 controls from the CIS Apple macOS 26 Tahoe Benchmark. The checks cover software updates, the firewall, sharing services, privacy, authentication, encryption and Apple Intelligence settings. Many failed checks can be fixed from the app with one click; admin-level fixes go through the standard macOS password prompt. Results can be exported as HTML or JSON. It suits people who want a readable security baseline for their own Mac without writing shell scripts.

The app bundle sets a minimum of macOS 13.5, and the release is an Apple silicon (arm64) build. The DMG is signed with a Developer ID and notarized. The author says much of the code was written with AI assistance and may still have rough edges. The same repository contains a Go command-line tool that runs the same checks.