Back to products
Mirror

Mirror

Detect hidden apps on MacOS

Website github.com
Overview

What it is

Mirror detects background macOS apps that deliberately hide from Activity Monitor. It exposes stealth tools like Interview Coder, Cluely, Hiding AI, and similar apps designed to stay invisible giving you full visibility and control over what’s really running on your Mac.

Intent

I need it when

Manage and terminate suspicious processes without complex system administration

Mirror offers one-click termination of detected suspicious applications using SIGTERM followed by SIGKILL if needed. Right-click context menu actions allow users to copy bundle IDs, copy PIDs, or reveal app locations in Finder for additional investigation.

Detect and remove overlay applications used for cheating or screen monitoring on macOS

Mirror scans active windows using Core Graphics framework to identify suspicious overlay applications by analyzing window layers, transparency, and missing titles. Users can instantly terminate detected apps with one click, helping protect against cheating tools and monitoring overlays.

Monitor macOS system for suspicious activity in real-time

Mirror provides continuous real-time monitoring of active windows and automatically performs scans on launch. Users can also manually trigger detection scans anytime, with results displayed with app icons, bundle identifiers, and process IDs for easy identification.

Identify potentially malicious applications running on a macOS system

Mirror categorizes detected applications by risk level (High, Medium, Low) based on suspicious characteristics like hidden layers (≥20), alpha transparency <1.0, and missing window titles. This risk scoring helps users quickly identify which applications pose the greatest threat.

Drop

Not a fit when

  • User needs a commercial security tool with vendor support and SLAs
  • User requires cross-platform support beyond macOS (Windows, Linux)
  • User needs real-time threat intelligence feeds or cloud-based threat analysis
  • User operates on macOS versions below 13.0 (Ventura)
  • User requires GUI-based management console for enterprise deployment across multiple machines
Commercials

Pricing

Free, open-source software