Antivirus policies and procedures - codemagic-ci-cd/company-handbook GitHub Wiki

last reviewed: 16 Jan 2026 by Martin Remmelgas

Codemagic employees use Mac computers as their workstations and rely on Mac built-in security features including, but not limited to

  • XProtect - Antivirus
  • Malware Removal Tool - Antimalware
  • Gatekeeper - Verifying software integrity
  • System Integrity Protection - Application access control management
  • Keychain - Sensitive data protection and access control

Codemagic believes introducing new 3rd party tooling for anti-virus is not only unnecessary but also poses a security risk so we rely on the native functionality of Apple-provided workstations and deem this sufficient.

Employees are required to keep up to date with the latest security patches of macOS software.

exceptions may be granted if sufficient controls are present. The CTO is responsible for approving non-macOS devices.

Browser anti-malware

Only approved browsers that come with built-in anti-malware software are allowed to ensure safe browsing. Allowed browsers include Safari, Chrome, Arc, and Firefox. If you'd like to extend this list, please ask Martin.