What is XProtect on a Mac? macOS's built in malware scanning
What the XProtect process does in macOS, why it can use CPU or memory, and whether you can stop it.
What is XProtect?
XProtect is the malware detection built into macOS. It checks apps and files against Apple's signatures and runs periodic background scans.
Why is XProtect using CPU or memory?
Background scans use some CPU and disk, more after Apple updates its signatures.
Can I stop XProtect?
No, and you should not. It is part of macOS security and runs briefly.
syspolicyd is the related service that checks apps when you open them.
Common questions
Is XProtect safe on a Mac?
Yes. It is part of macOS. XProtect is the malware detection built into macOS.
Can I quit XProtect?
No, and you should not.