RansomWhere?
RansomWhere?: A free, open-source macOS utility for detecting and blocking ransomware-like behavior. Ranked #35 of 42 in Antivirus for Mac by our editors (5.9/10); pricing: Free plan; best for free ransomware-focused Mac defense.
At a glance
- Editor score5.9 / 10
- PricingFree plan
- Best forFree ransomware-focused Mac defense
- Free planYes
- Paid fromFree
- Facts checked22 Sep 2026
Where it wins
- Continuous real-time file-entropy analysis
- Suspends suspicious processes and shows encrypted-file details
- Open-source, free, and supports remembered allow/block rules
Where it doesn't
- Focused on ransomware rather than complete antivirus coverage
- Requires macOS 10.15 or later
- Requires elevated privileges and Full Disk Access
Our verdict on RansomWhere?
RansomWhere? is a free, open-source macOS utility from Objective-See Foundation that focuses on ransomware detection rather than broad antivirus coverage. It is intended for Mac users who want a specialized defense against processes that rapidly create encrypted files. The utility continuously analyzes file entropy, identifies suspicious or untrusted processes, and can suspend a process when ransomware-like activity is detected. It supports macOS 10.15 or later and requires elevated privileges plus Full Disk Access.
Its standout feature is the behavior-based focus on encryption activity. When a process is flagged, RansomWhere? provides an alert with process and encrypted-file details, then lets the user allow or block that process. Rules can remember those decisions, reducing repeated prompts for known activity. Notarization mode provides another configuration option for trusting notarized applications, while configurable preferences and automatic-update checks give users control over how the utility operates.
The product's narrow scope is both its main strength and its clearest boundary. It provides real-time ransomware protection for macOS, but it is not positioned as complete antivirus coverage across other threat types or platforms. Users who specifically want free, open-source ransomware monitoring on a Mac should find its focused feature set relevant. Users seeking broader antivirus protection, multi-platform coverage, or a wider security suite should choose an alternative designed for those needs.
Your product? Our editors can test RansomWhere? in depth and publish a review, labelled as paid · from $149/mo →
RansomWhere? pricing
RansomWhere? fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Ransomware protection | Yes |
| Phishing protection | Not verified |
| Real-time protection | Yes |
| Coverage scope | Mac-only |
| Devices included | Not verified |
| VPN included | Not verified |
| Password manager | Not verified |
| Deployment | Desktop |
| Platforms | macOS |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Free plan |
| Website | objective-see.org |
| Facts checked | 22 Sep 2026 |
Alternatives to RansomWhere?
- Avast OneBroad multi-device protection with a free entry plan and layered paid features.9.3
- Bitdefender Antivirus for MacFocused Mac protection with ransomware coverage, web defenses, and a 30-day trial.9.2
- Avira Free SecurityA free Mac security package combining malware protection with privacy and performance tools.9.1
See all RansomWhere? alternatives →
Used RansomWhere?? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used RansomWhere? for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
RansomWhere? is listed in our Antivirus for Mac directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/ransomwhere/"><img src="https://www.itechguides.com/best/badge/ransomwhere.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update