AppBreakup
KnockKnock logo

KnockKnock

Free Mac scanner that lists everything set to run automatically, to help spot persistent malware.

Verified facts
4 of 4
Alternatives ranked
3
Approved reviews
0
Visits sent from here
0

About KnockKnock

KnockKnock is a free, open-source Mac utility from the Objective-See Foundation, often described as Autoruns for macOS. Malware usually installs itself so it runs again after every restart, and KnockKnock enumerates those places: launch agents and daemons, login items, browser extensions, kernel and system extensions and more. Results are grouped by category, with icons showing whether each item is signed by Apple, signed by a third party or unsigned, plus optional VirusTotal lookups if you add a free API key. There is nothing to install; you unzip the app and run a scan on demand. It only lists what it finds, so legitimate software shows up too and the user decides what is suspicious. That makes it a good triage and inspection tool for technically minded Mac users and incident responders, rather than a replacement for real-time antivirus. It runs on macOS 10.15 and later and is licensed under the GPL.

Best for: Mac users and responders checking a machine for anything that persists across restarts.

Pros and cons

What works

  • No installation; run it from anywhere and delete it when done
  • Clear signed, third-party and unsigned markers make odd items easy to spot
  • Optional VirusTotal checks with a free personal API key

Why people leave

  • On-demand only, with no real-time protection
  • Lists legitimate apps alongside threats, so results need interpretation
  • Runs only on macOS

Top KnockKnock alternatives

See all 3
  1. 1BlockBlock logo
    BlockBlock

    Same developer; watches persistence locations continuously and alerts as new items are added.

    66.5
  2. 2Malwarebytes logo
    Malwarebytes

    Scans for and removes known malware automatically instead of only listing startup items.

    62.6
  3. 3ClamXAV logo
    ClamXAV

    Signature-based Mac antivirus with scheduled scans for people who want detection, not just inventory.

    59.6

Why people left KnockKnock

In reviewers' own words, from reviews of the apps they moved to. These are their opinions, not ours.

No switching stories yet. If you moved away from KnockKnock, review the app you switched to and tell us why.

Reviews

No approved reviews yet. How we verify reviewers

Write a review of KnockKnock
Your rating of KnockKnock

Never shown publicly. A work email helps us verify you.

What did you use it for, and what was good or bad? At least 40 characters.

A GitHub username, your company domain, or say you can send a screenshot. Verified reviews count more.

By submitting, you confirm you're at least 16 and agree to our terms. Your name, rating, review and the date are published; your email isn't. See our privacy policy.

KnockKnock: common questions

Is KnockKnock free?

Yes. KnockKnock is free, open-source software.

Is KnockKnock open source?

No, KnockKnock is not open source.

What platforms does KnockKnock run on?

KnockKnock is available for macOS.

What are the best alternatives to KnockKnock?

The highest-ranked KnockKnock alternatives right now are BlockBlock, Malwarebytes and ClamXAV. See the full ranked list for pricing, platforms and verified facts.

See all 3 KnockKnock alternatives