Key Features
Monitor Anything, Anywhere
Keep watch on folders, drives, or specific files or folders, external USBs, LaunchAgents, or any path you choose
Detect Suspicious Activity
Get real-time alerts when .plist, .sh, or other critical files are created or modified; perfect for catching persistence tricks or changed system files
Full Control Over Notifications
Choose how Watchtower notifies you: on-screen alerts, sound, screen flash, or silent logging
Log Everything for Audits
Automatically record matching file events to a log file, ideal for audits
Smart Rule Builder
Use wildcards and versatile path patterns to create flexible, powerful file monitoring rules
External Drive Watch
Stay updated when external drives are mounted unmounted
Lightweight & Native
Built for macOS using Apple's FSEvents API, so no system slowdowns, no need for elevated permissions
Privacy-First
No data ever leaves your Mac; everything is stored and processed locally
Screenshots
Monitor your file activity
See at a glance which paths are being monitored, start or stop monitoring instantly, and view recent events in the log
Enjoy flexible Rule-building
Create powerful rules by combining file patterns, triggers, and actions
Real-time Alerts
Get instantly notified when a rule is triggered