# What happens after a security check? Checking is not fixing. > A check finds a weak setting. Hardening changes it. Follow one Mac screen lock example from the first finding and the owner’s approval to a checked result. Page: https://cybee.ai/blog/checking-and-hardening/ (Security checks vs hardening: what changes on a Mac?) - [Blog](https://cybee.ai/blog/) - Checks and hardening Mac security A check finds a weak setting. Hardening changes it. Follow one screen lock finding from the first check to the result, and see where the owner of the Mac decides. By [cybee](https://cybee.ai/about/#founders) Updated 24.09.2026 5 minute read In one minute - A security check looks at a setting and reports what it found. It changes nothing on the Mac. - Hardening changes the setting. The owner reviews the change and says yes. Then a new check confirms the result. - Protection against harmful programs is a separate job. It keeps running while you work on settings. - A fix made today is not evidence for the weeks before it. Keep the earlier record and the later one apart. - cybee runs the 118 checks free on every Mac. The Proof plan applies the safe settings and keeps them on. ## What is the difference between a security check and hardening? A security check looks at a setting and reports what it found. Hardening changes supported settings so there are fewer ways in. In between, you review what the change will do, approve it and check the new result. Protection against suspicious activity is a separate job. It keeps running alongside all of this. **Q:** What does hardening mean? ### What hardening means. Your Mac has many security switches of its own, such as disk encryption and the screen lock. Hardening turns them on the safe way, and keeps them on. On the Proof plan cybee sets the safe values and switches them back if someone changes them. Anything that changes a Mac asks the person who uses it first. **Q:** Where do the checks come from? ### Where the checks come from. From the CIS Benchmark, a public, industry maintained list of the safest settings for macOS. Many compliance frameworks accept it as a baseline for secure settings. 118 CIS Benchmark checks on every Mac, free. [How safer settings work](https://cybee.ai/docs/hardening/) ## The finding describes the starting point. Someone steps away from their laptop, and the screen stays open long after they have gone. The check shows how long the Mac waits before it locks the screen, and when that value was seen. The finding has not changed anything on the Mac. cybee compares the settings with the CIS Benchmark, a public security checklist. The free result, such as 117 of 118 checks holding, shows where to start. Checks nobody could assess stay unknown. And a better overall result does not answer every single question. ## Understand the effect on your work. Take one setting on one Mac: how long the screen waits before it locks. observe confirm check Figure: Sample values. Not a recommendation for every team, and not a released profile. Before you approve, ask which Macs are affected and what the change means for your work. A shared Mac may need a different setting from a personal laptop. And ask how to reverse the change. **Q:** Can a change be undone? ### Undoing a change. Ask your AI assistant how to undo a change on that Mac before you approve it, and check the result again afterwards. ## Keep threat protection running. Safer settings close gaps in how a Mac is set up. Threat protection watches what programs do and looks for the patterns of an attack. A Mac with every setting right can still meet a harmful program, which is why both jobs matter. AI tools run on that same Mac. Their inventory and the actions recorded for them add context. But a connection in the settings, or an action marked completed, does not show on its own that the activity was safe. > Settings close the gaps. Protection watches what runs anyway. **Q:** What does protection watch? ### What protection watches. What programs do after they start. If one begins to behave like an attack, such as encrypting your files, cybee stops it and tells you in plain words. It knows 137 patterns of how bad software behaves. Every time it starts, it checks that each one still works. Free on every Mac. More than 26,000 new malware samples for Mac appeared in 2025, according to Jamf Security 360, 2026. ## Keep the result, and keep the setting. On the Proof plan, cybee applies supported settings and corrects them if they drift away from the profile you chose. Ask how to reverse a change before you approve it. When you review a Mac, read its most recent observation. A dated record can answer a later client question about those Macs. It describes what was seen. A fix made today is not evidence for the weeks before it. Figure: Two records, kept apart. The later fix does not change what the earlier check saw. **Q:** Which profiles can I choose? ### The three profiles. The Proof plan keeps your settings on one of three profiles: essential, balanced or fortress. You choose the profile. Whichever you pick, anything that changes a Mac asks its owner first. Proof plan Setting the safe values and keeping them on is part of the Proof plan: CHF 9 per Mac per month, or 90 a year, excluding tax, with a 14 day trial. Protection and the 118 checks stay free on every Mac. ## Start with one task you can manage. 1 Choose one open finding on a supported Mac. 2 Understand the effect, the approval and how to reverse it. Do this before anything on the Mac changes. 3 Check the result, then include the other Macs it affects. Keep your existing security tools while you find out whether they work well together. If a device management tool already controls a setting, agree which system keeps it before you add another. Background: [CIS Benchmarks](https://www.cisecurity.org/cis-benchmarks) and [Apple’s malware protection overview](https://support.apple.com/guide/security/protecting-against-malware-sec469d47bd8/web). **Q:** What is device management? ### What device management is. A tool some companies use to set up and control their Macs from one place, often called MDM. If you already have one, it may set some of these settings for you. Two systems pulling the same setting in different directions help nobody. Decide which one owns it. ## Sources and product scope. Written by cybee for small teams. The provider references explain the underlying controls. Our documentation sets out what cybee covers today. - [CIS Benchmarks](https://www.cisecurity.org/cis-benchmarks) - [Apple: malware protection in macOS](https://support.apple.com/guide/security/protecting-against-malware-sec469d47bd8/web) - [cybee: safer settings guide](https://cybee.ai/docs/hardening/) ## Review a change before you approve it. The safer settings guide covers approval, settings that stay on and how to reverse a change. [Read the safer settings guide](https://cybee.ai/docs/hardening/) On this page - Check or hardening: the difference - The finding is the starting point - The effect on your work - Keep protection running - Keep the result and the setting - Start with one task - Sources and product scope [Look up a term](https://cybee.ai/glossary/) cybee Checks 118 settings on every Mac for free, and asks before it changes one. [See how it works](https://cybee.ai/product/#hardening) ## From a setting to an answer. Three more guides. [Mac security Are Macs secure enough for a small business? What your Mac already protects, and what a small team still needs to check. Read the guide](https://cybee.ai/blog/mac-security-small-business/) [client requests How to answer a client’s security questionnaire. Answer from dated facts on your Macs, and give every open question an owner. Read the guide](https://cybee.ai/blog/mac-security-questionnaire/) [Mac security Can a browser extension read your client’s work? What extension permissions mean, and when to keep, limit or remove one. Read the guide](https://cybee.ai/blog/browser-extension-permissions/) ## Your next client will ask. Be ready. `curl -sSf https://get.cybee.dev | sh` Run it in Terminal, a chat, your IDE or a CLI. Keep working where you started. Free for every Mac with an Apple chip · Asks before it changes your Mac [What it installs](https://cybee.ai/docs/install/#see) [Read the install script](https://get.cybee.dev)