05 · Accounts & Privileges
macOS Accounts, sudo and Least Privilege: Hardening Guide
Run macOS as a standard user, harden sudoers, enable Touch ID for sudo safely, disable guest and auto-login, and enforce password and screen lock policy.
Read guide
Guides
04 · Network & Firewall
macOS Firewall and pf: Application Firewall, pf and Sharing
Harden macOS networking with the Application Firewall, pf packet filter rules, disabled sharing services and managed encrypted DNS profiles.
Read guide