Runtrace

Find vulnerable software installed on developer Macs, understand which devices are affected, and verify that updates removed the risk.

Runtrace checks installed developer tools and project packages against public security advisories. It shows what is affected, which Macs need attention, and how to confirm the fix.

Homebrew packages, global language tools, and standalone command-line applications on each Mac.

Package metadata from manifests and lockfiles, without treating the files themselves as security findings.

Known vulnerabilities grouped by package and affected Mac, with the available fix and a confirmation scan.

Repository scanners inspect code stored in services such as GitHub. Runtrace also checks command-line tools, package-manager installs, local binaries, and project packages that are present on the Mac itself.

Find the issue, decide what matters, and confirm the fix.

Security teams see the impact across the company. Developers get the affected package, the version to install, and a clear way to check that the issue is gone.

Record package names and versions from enrolled Macs without uploading source code or file contents.

Compare each exact version with the Open Source Vulnerabilities database and other public advisory records.

Combine duplicate alerts and raise issues that affect more Macs, important devices, or software known to be exploited.

Assign an owner, install a safe version, and scan again to confirm that the affected version is no longer pre