Jamf has launched Beacon, a managed threat‑hunting service that focuses exclusively on macOS environments. As Macs become commonplace in corporate fleets, researchers have catalogued a growing roster of mac‑specific malware, social‑engineering kits, and persistence tricks that evade generic security suites, and enables security teams to act faster across multiple departments.

Beacon taps Apple’s Endpoint Security API to collect telemetry on process launches, file writes, and network connections. Jamf Threat Labs analysts apply detection rules built specifically for macOS, then scan up to a year of data when new indicators emerge, and correlate findings with existing SIEM solutions. The service flags trojanized installer packages, compromised Visual Studio Code projects, Click‑Fix campaigns and fake‑job‑offer malware, delivering reports with guidance.

By delivering mac‑focused visibility that traditional cross‑platform tools lack, Beacon helps enterprises close a critical blind spot in their defense stack. The add‑on integrates with existing Jamf for Mac and Jamf for Mac Hi‑Ed deployments through a professional‑services engagement, though pricing remains undisclosed. Organizations now have a dedicated pathway to hunt, analyze, remediate macOS threats and streamline incident response workflows.