01
Spot inspection signals
Compare macOS trust with an independent public certificate baseline. See confirmed, suspected, and unknown results in context.
A little clarity.For every connection.
See the trust behind your traffic. Uncover TLS inspection signals, explore certificates, and understand your network. Right from your Mac’s menu bar.
Free & open source · macOS 14+ · Apple Silicon
Domain inspection ratio
41.4%
Confirmed12
Suspected3
Public trust14
Certificate activity
Example Enterprise CACN=Example Enterprise Root CA
ConfirmedPublic certificate baselineCN=Example Public Root CA
Public trustNo matching domains.
api.example.org
:443- Native trust
- Accepted
- Public baseline
- Not accepted
- TLS
- TLS 1.3
Certificate activity
Connect a certificate authority to the domains where it appears. Review its identity, validity, and trust evidence.
Example Enterprise CA
- Issuer
- Example Enterprise Root CA
- Validity
- 2026-01-01 — 2027-01-01
- SHA-256 fingerprint
- 5F:2A:91:0B:8C:4D:3E:77:12:8F:6A:C3:09:DA:2E:45:6B:AC:11:3D:7F:9B:08:2C:4A:EE:56:91:B3:D7:0F:22
Built for your Mac. Built to be understood.
Native SwiftUI
Feels right at home.
MIT licensed
Open for everyone.
Local analysis
On your own Mac.
No account needed
Download and explore.
Less guessing. More understanding.
From a network signal to the certificate behind it. Everything you need to follow the evidence.
02
Follow the certificate
Explore issuers, validity dates, fingerprints, and the domains that share a certificate authority.
03
Keep the context
Search observed domains, inspect probe results, and trace connection details without leaving your menu bar.
Three views. One clearer picture.
Interactive preview · Sample data
One glance at the evidence.
A compact view of observed domains and their classifications. Open a certificate to understand the detail behind a signal.
Domain inspection ratio
41.4%
Confirmed12
Suspected3
Public trust14
Certificate activity
Example Enterprise CACN=Example Enterprise Root CA
ConfirmedPublic certificate baselineCN=Example Public Root CA
Public trustNo matching domains.
api.example.org
:443- Native trust
- Accepted
- Public baseline
- Not accepted
- TLS
- TLS 1.3
Certificate activity
Connect a certificate authority to the domains where it appears. Review its identity, validity, and trust evidence.
Example Enterprise CA
- Issuer
- Example Enterprise Root CA
- Validity
- 2026-01-01 — 2027-01-01
- SHA-256 fingerprint
- 5F:2A:91:0B:8C:4D:3E:77:12:8F:6A:C3:09:DA:2E:45:6B:AC:11:3D:7F:9B:08:2C:4A:EE:56:91:B3:D7:0F:22
Illustrative preview. Independent probes do not establish which certificate another app received.
Private by architecture.
Your network observations belong on your Mac. No central analysis service. No account to create.
- Observations stored locally
- Independent public certificate baseline
- Pause monitoring whenever you want
Probes connect to discovered hosts. Some metadata and logs are not encrypted.
How your data is handledYour Mac
Local analysis
Clearer context
From your menu bar to the evidence.
A simple flow from observation to understanding, right on your Mac.
Open swg bar
Install on macOS 14 or later with Apple Silicon. Open the app from your menu bar.
Let the signals surface
Import accessible Chromium browser history and discover domains through available network metadata. TLS probes gather trust evidence.
Explore the evidence
Review domains, certificate details, and classifications. Follow a signal at your own pace.
ConfirmedSuspectedPublic trustExpected privateUnknownExcluded
Trust should be inspectable.So should the tools.
Read the code. Question the evidence. Help make network trust a little easier to understand.
Explore the sourceEarly days. Real conversations.
We’re collecting feedback from the people using swg bar. Tried it on your network? Share what you found.
Share your experienceA clearer network. A simple price.
Completely free and open source under the MIT license. All the essentials, without a subscription.
SWG BAR
$0
Completely free & open source
- TLS inspection insights
- Domain & certificate details
- 5 languages · 3 appearance modes
- Local analysis, no account
A few things worth knowing.
Straight answers, from the project itself.
What does swg bar actually detect?
It compares native macOS trust with an independent public certificate baseline to surface TLS inspection signals. Classification depends on collected evidence and rules. A repeated certificate authority alone is not proof of inspection.
Does it intercept or decrypt my traffic?
No. swg bar examines available connection metadata and certificates, and makes its own TLS probes. It is not a VPN, traffic blocker, or decryption proxy. A probe cannot prove which certificate another application received.
Which Macs are supported?
The published v1.7.0 installer requires macOS 14 or later and an Apple Silicon Mac (M1 or later). An Intel installer is not included in this release.
Why might macOS show a security notice?
The current release uses ad-hoc signing. It is not Developer ID signed or notarized by Apple. After reviewing the source and download, follow the app-specific option in System Settings → Privacy & Security if macOS blocks it. Managed Macs may restrict installation.
What data does the app use?
It reads macOS certificate trust, imports hostnames from accessible Chromium browser histories, and uses network metadata where permissions allow. Observations stay local; probes make outbound TLS connections. Some fields are encrypted, but metadata and logs are not fully encrypted.
Are there limits to the results?
Yes. Current classification is scoped to supported IPv4 HTTPS evidence. Missing handshakes, unavailable capture permissions, unsupported traffic, and other gaps may leave results unknown or excluded. Treat the app as an evidence tool, not a guarantee.
What happens when I upgrade?
The current application resets its local database, rules, encryption key, and archived logs when it detects a newer version. Back up ~/Library/Application Support/SWGBar/ and ~/Library/Logs/SWGBar/ before upgrading if you need existing records.
Make the invisible a little clearer.
Start with your next connection.