Key Features
Monitor Any File, Anywhere
Keep watch on folders, drives, or specific files or folders, external USBs, or any path you choose
Detect Suspicious Activity
Get real-time alerts when .plist, .sh, or other critical files are created or modified; perfect for catching persistence tricks or changed system files
Full Control Over Notifications
Choose how Watchtower notifies you: using on-screen alerts, audio, screen flashes, macOS notifications, or silent logging; you can even customize your notification messages
Log Everything for Audits
Automatically record matching file events to a log file, ideal for audits
Smart Rule Builder
Use wildcards and versatile path patterns to create flexible, powerful file monitoring rules and even update your rules while Watchtower is running
External Drive Watch
Stay updated when external drives are mounted and unmounted
Intuitive Interface
Easy-to-setup monitoring, but if you're ever lost, you can access the 25 page User Guide with one click
Lightweight & Native
Built for macOS using Apple's FSEvents API, so no system slowdowns, no need for elevated permissions
Privacy-First
No data ever leaves your Mac; everything is stored and processed locally
Screenshots
Monitor your file activity
See at a glance which paths are being monitored, start or stop monitoring instantly, and view recent events in the log
Enjoy flexible Rule-building
Create powerful rules by combining file patterns, triggers, and actions
Real-time Alerts
Get instantly notified when a rule is triggered using Alerts, macOS notifications, or sound