North Pole Security
@northpolesec.bsky.social
📤 27
📥 3
📝 65
North Pole Security account. We make Santa
https://github.com/northpolesec/santa
Day 10 of our FAAdvent Calendar: A one-liner command is all you need to see if a password is legit, but Santa's CEL rules can stop this common post exploitation behavior.
northpole.security/blog/2025-ad...
about 21 hours ago
0
0
1
Day 8 of our FAAdvent Calendar: Hide your macOS password hashes! A one-liner command can expose the hash and salt, but Workshop & Santa's file access rules & CEL rules can protect these crown jewel files.
northpole.security/blog/2025-ad...
3 days ago
0
0
1
Day 7 of our FAAdvent Calendar : Prevent macOS Gatekeeper from being disabled on your fleet by creating a Santa CEL rule!
northpole.security/blog/2025-ad...
4 days ago
0
1
1
Day 6 of our FAAdvent Calendar: Protect your browser cookies from infostealers with Santa's File Access Rules—limit access so only the browser can read its own cookies!
northpole.security/blog/2025-ad...
5 days ago
0
0
1
We've started our FAAdvent Calendar a collection of short things you can do with Workshop and Santa to improve improve your security while staying productive.
northpole.security/blog/2025-ad...
loading . . .
North Pole Security Advent Calendar: 25 Days of macOS Protection
Discover 25 production-ready Santa rules inspired by actual macOS malware. Each day reveals a new CEL or FAA configuration to protect against threats like Atomic Stealer and threat campaigns targeting...
https://northpole.security/blog/2025-advent-calendar
6 days ago
0
1
0
'Tis the season for new features. 🎁 Introducing On-Demand Monitor Mode in Workshop & Santa—monitor mode access only when you need it, only when you prove you're at the keyboard. Check out the Loom ⬇️
www.loom.com/share/0c09ed...
loading . . .
Introducing On-Demand Monitor Mode in Santa and Workshop 🚀🎅
In this video, I introduced a new feature called on-demand monitor mode that will be available in the next versions of Santa and Workshop. This feature allows users to temporarily switch from lockdown...
https://www.loom.com/share/0c09ede1ff38480298b03cea5af10959
10 days ago
0
0
1
Join us in celebrating North Pole Security's first anniversary! 🎉 Reflect on a year of innovation, growth, & unwavering commitment to livable security with Santa and Workshop. Read about our journey and what's next!
#FirstAnniversary
#Santa
#Workshop
northpole.security/blog/one-yea...
2 months ago
0
0
1
Yesterday we released Santa v2025.8 on GitHub.
github.com/northpolesec...
This release includes a handful of new features. Some highlights include: - Support for CEL string extensions to enable writing more powerful policies. This lets you do things like args.join(" ").contains("-flag option")
loading . . .
Release v2025.8 · northpolesec/santa
Notes Announcements 🎉 Santa has a new Workshop! North Pole Security is excited to announce the release of Workshop, an official sync service specifically designed to deeply integrate with Santa. It...
https://github.com/northpolesec/santa/releases/tag/2025.8
3 months ago
1
0
0
Incredibly humbled by the amazing feedback from our community! Thank you for growing with us - here's to continuing to build something great together! 🚀
4 months ago
0
0
0
Keeping with our Christmas in July🎄, we just released Santa 2025.7 on GitHub
github.com/northpolesec...
This release includes: - A new icon that matches the company's branding - Ready for Tahoe! - Bug fixes and more
loading . . .
Release v2025.7 · northpolesec/santa
Notes Announcements 🎉 Santa has a new Workshop! North Pole Security is excited to announce the release of Workshop, an official sync service specifically designed to deeply integrate with Santa. It...
https://github.com/northpolesec/santa/releases/tag/2025.7
4 months ago
0
0
1
🎉 It's Christmas in July! We raised $4M to make proactive macOS security scalable for everyone. Workshop is the first commercial platform built for Santa. Finally making allowlisting usable at scale. Thanks to A16Z & everyone's who's believed in our mission.
4 months ago
1
5
2
📢 Earlier this month we released Santa 2025.6
github.com/northpolesec...
🧵 This is a large release with several features
loading . . .
Release v2025.6 · northpolesec/santa
Notes ImportantThe binaries initially uploaded for this release only contained the arm64 slice. We have updated the binaries to be universal and also include the x86_64 slice as well. You may need ...
https://github.com/northpolesec/santa/releases/tag/2025.6
5 months ago
1
0
1
📢 We've just released Santa v2025.5 on GitHub
github.com/northpolesec...
This release includes a handful of new features and changes: Some highlights Below 🧵:
loading . . .
Release v2025.5 · northpolesec/santa
Notes If you're migrating from Google Santa, please see the Migration Guide for details on how to upgrade. Santa documentation has undergone a complete overhaul and can be found at northpole.dev. A...
https://github.com/northpolesec/santa/releases/tag/2025.5
7 months ago
1
0
1
Very exciting to see Santa called out as a tool that works in the
@specterops.io
SO-Con talk on Modern macOS Red Teaming Tactics by Lance Cain and
@werdhaihai.bsky.social
www.youtube.com/watch?v=t_L2...
loading . . .
Modern macOS Red Teaming Tactics | SO-CON 2025
YouTube video by SpecterOps
https://www.youtube.com/watch?v=t_L2bdbXkp0
7 months ago
0
2
1
📢 Last week we released Santa v2025.4
github.com/northpolesec...
Along with some big changes 🧵
loading . . .
Release v2025.4 · northpolesec/santa
Notes If you're migrating from Google Santa, please see the Migration Guide for details on how to upgrade. Santa documentation can be found at northpole.dev. Announcements 📣 Opt-In Stats Collection...
https://github.com/northpolesec/santa/releases/tag/2025.4
7 months ago
1
0
1
Today we released Santa v2025.3 on GitHub
github.com/northpolesec...
. This release includes a handful of new features.
loading . . .
Release v2025.3 · northpolesec/santa
Notes If you're migrating from Google Santa, please see the Migration Guide for details on how to upgrade. Santa documentation can be found at northpole.dev. Announcements 📣 Opt-In Stats Collection...
https://github.com/northpolesec/santa/releases/tag/2025.3
8 months ago
1
1
1
We agree with CISA and think you should use Santa too
www.cisa.gov/sites/defaul...
9 months ago
0
0
1
📣 We’ve just released Santa v2025.2 on GitHub.
github.com/northpolesec...
Some highlights include: - Process-centric File Access Authorization rules are now in Beta! This means FAA rules can now target all access from a given process without knowing the files that will be accessed ahead of time.
loading . . .
Release v2025.2 · northpolesec/santa
Notes If you're migrating from Google Santa, please see the Migration Guide for details on how to upgrade. Santa documentation can be found at northpole.dev. Announcements 📣 Opt-In Stats Collection...
https://github.com/northpolesec/santa/releases/tag/2025.2
10 months ago
1
1
1
Last night we released Santa 2025.1
github.com/northpolesec...
Notable features include: Entitlements in the Sync Protocol This allows you to avoid authorizing or see which applications are disabling code signing on libraries.
loading . . .
Release v2025.1 · northpolesec/santa
Notes If you're migrating from Google Santa, please see the Migration Guide for details on how to upgrade. Santa documentation can be found at northpole.dev. Fixed ❗ Fixed an issue where santactl c...
https://github.com/northpolesec/santa/releases/tag/2025.1
11 months ago
1
1
1
We've released v2024.12 of Santa.
github.com/northpolesec...
This addresses an upgrade issue when running in lockdown mode and also a minor issue where a root user is able to inject rules when it is configured to use a sync service is configured.
loading . . .
Release v2024.12 · northpolesec/santa
Notes If you're migrating from Google Santa, please see the Migration Guide for details on how to upgrade. This release fixes an issue that could affect users that upgraded to v2024.11 from v2024.1...
https://github.com/northpolesec/santa/releases/tag/2024.12
12 months ago
0
1
0
Today we're excited to release Santa v2024.11!
github.com/northpolesec...
Highlights: 1. Our initial beta for standalone mode: This lets you authorize binaries using TouchID. So you can live in lockdown mode.
www.youtube.com/watch?v=Hd4t...
loading . . .
Santa Standalone Mode w/Swift UI
YouTube video by Pete Markowsky
https://www.youtube.com/watch?v=Hd4t9mW-C-c
about 1 year ago
1
1
2
Our co-founders (Russell Hancox and
@plm.bsky.social
) were recently on the @MacAdmPodcast talking about Santa and
@northpolesec.bsky.social
podcast.macadmins.org/2024/11/19/e...
loading . . .
Episode 389: North Pole Security & Santa
Santa’s got new digs up at North Pole Security! Join us as we talk with Russell and Pete from North Pole about what Santa’s move means, how it’s developing in the future, and what’s coming next for…
https://podcast.macadmins.org/2024/11/19/episode-389-north-pole-security-santa/
about 1 year ago
0
0
1
Today is Santa's 10th Birthday 🎂🎉. The first commit was from Russell Hancox at 4:23 PM
about 1 year ago
0
1
1
Last week we made our first Open Source release of Santa version 2024.10
github.com/northpolesec...
Highlights: 1. Streamlined UI with silencing options and added a button to copy relevant data to the clipboard to help users report issues / blocks to security
about 1 year ago
1
0
3
you reached the end!!
feeds!
log in