Security · an honest answer
Do I need an antivirus on a Mac?
macOS already runs one. XProtect checks every app you launch against Apple's signatures, updates itself in the background, and costs nothing.
The three things already running
- XProtect — signature-based malware detection, checked on every launch, with signatures Apple pushes out separately from system updates.
- Gatekeeper — refuses to run software that is not signed and notarised, unless you explicitly allow it.
- XProtect Remediator — periodic scans that remove families Apple already knows about.
Checking it yourself
# is Gatekeeper on?
spctl --status
# when did the malware signatures last change?
system_profiler SPInstallHistoryDataType | grep -A 3 XProtectDo not judge it by the bundle's modification date. That date moves for reasons that have nothing to do with the signatures, which is why the install history is the honest source — it says when the update was actually installed.
When a third-party scanner is still worth having
XProtect knows what Apple has seen. It is signature-based, so a genuinely new family can run for a while before it is covered, and it does not scan files you have been sent for the benefit of somebody else — a Windows macro you forward on, for instance. If you handle other people's files professionally, a real scanner with a real feed is a reasonable purchase.
What is not reasonable is a cleaning app offering a scan as a feature. A scanner is only as good as the feed behind it, and a feed costs money every month, for ever. A one-time purchase cannot fund one — and a scanner whose definitions quietly stopped updating is worse than none, because it still reports that it found nothing.
Where the app comes in
RefreshYourMac has no scanner and does not pretend to. It reads out what your Mac already has — the XProtect version, the date it was really installed, and whether Gatekeeper is on — so you can see the protection you are relying on instead of being sold a second one. What it shows, and why there is no scan button: malware protection. If a slow Mac is what made you suspect malware, start with why a Mac runs slow.
What to do next: see these numbers for your own Mac. Download RefreshYourMac free, or get it on the Mac App Store.
What it costs to have an app do this
| RefreshYourMac | CleanMyMac | MacKeeper | |
|---|---|---|---|
| Pay once | $24.99 | €119.95 on MacPaw’s store; $89.99 for CleanMyMac X on the Mac App Store | subscription only |
| Yearly | $14.99 a year, first 7 days free | $39.99/yr on the Mac App Store; €39.95/yr on MacPaw’s store | €71.40 for the first year, 1 Mac. Their page shows it against a €119.40 list price |
| Monthly | $1.99 a month | $9.99/mo | €10.95/mo |
| Account needed | No | Yes | Yes |
Before you pay anything, both versions give you 3 free scans. CleanMyMac and MacKeeper prices read from their own pages and the Mac App Store on 27 October 2026; the full comparison is at RefreshYourMac vs CleanMyMac and MacKeeper.
Frequently asked questions
What is XProtect on a Mac?
XProtect is the signature-based malware detection built into macOS. It checks every app you launch against Apple’s signatures, which Apple pushes out separately from system updates, and it updates itself in the background at no cost.
How do I check that Gatekeeper is turned on?
Run spctl --status in Terminal. Gatekeeper refuses to run software that is not signed and notarised unless you explicitly allow it. To see when the malware signatures last changed, read the install history rather than the XProtect bundle’s modification date, which moves for unrelated reasons.
When is a third-party antivirus worth having on a Mac?
XProtect is signature-based, so a genuinely new family can run for a while before it is covered, and it does not scan files you forward for somebody else, such as a Windows macro. If you handle other people’s files professionally, a real scanner with a real feed is reasonable.