Key Features
Monitor Any File, Anywhere
Keep watch on folders, drives, or specific files or folders, external USB drives, or any path you choose
Detect Suspicious Activity
Get real-time alerts when .plist and other files are created or modified in sensitive locations; perfect for catching persistence tricks or changed system files
Full Control Over Notifications
Choose how Watchtower notifies you: using on-screen alerts, audio, screen flashes, macOS notifications, or silent logging; you can even customize your notification messages
Log Everything for Audits
Automatically record matching file events to a log file, ideal for audits
Comprehensive Rule Builder
Use wildcards and versatile path patterns to create flexible, powerful file monitoring rules and even update your rules while Watchtower is running
External Drive Watch
Stay updated when external drives are mounted and unmounted
Intuitive Interface
Easy-to-setup monitoring, but if you're ever lost, you can access the 30+ page User Guide with one click
Lightweight & Native
Built for macOS using Apple's FSEvents API, so no system slowdowns, no need for elevated permissions
Privacy-First
No data ever leaves your Mac; everything is stored and processed locally
Screenshots
Monitor your file activity
See at a glance which paths are being monitored, start or stop monitoring instantly, and view recent events in the log
Enjoy flexible Rule-building
Create powerful rules by combining file patterns, triggers, and actions with customized notifications
Real-time Alerts
Get instantly notified when a rule is triggered using Alerts, macOS notifications, or sound