open·orchard

open-source security · the Apple ecosystem

Grown
in the open.

An orchard growing open-source security tools — and the occasional write-up (soon!) — for the Apple ecosystem.
Built in the open, free to use, and honest about what they do (and don't) do.

Open-source tools

// the grove

OPAL

Osascript Payload AnaLyzer

Client-side deobfuscator for macOS osascript / JXA stagers. Peels every decoded layer and extracts IOCs — without ever executing the payload. Runs entirely in your browser; nothing is uploaded.

TypeScript macOS malware triage zero-egress
Launch ↗ Source

More, growing…

Fresh tools are being grafted onto the orchard. Watch the org on GitHub to catch them as they ripen.