Gatekeeper is a macOS security mechanism that evaluates downloaded applications before they run, checking where the app came from and whether it meets expected security requirements. It is particularly relevant for software distributed outside the Mac App Store.
What Gatekeeper checks
Depending on the application and its origin, Gatekeeper can consider code signing, Developer ID status, notarization, and quarantine information attached to the download.
Why downloaded files are marked
Browsers and other applications can attach a quarantine attribute to files downloaded from the internet. That tells macOS to apply additional checks when the application is opened for the first time.
Why warnings can appear
Warnings can result from an unsigned application, invalid signature, missing notarization, or other risks detected by macOS.
Do not bypass warnings reflexively
When Gatekeeper blocks an application, first verify that the file came from the official source and understand why the check failed. Disabling security mechanisms globally is not a good default.
Gatekeeper is not a complete antivirus
It validates important properties of the distribution path but does not replace full malware detection and does not guarantee that signed software is bug-free.
Direct downloads and Gatekeeper
An application does not need to be in the Mac App Store for Gatekeeper to accept it. Developer ID signing and notarization provide an official direct-distribution path.
Priviot
For directly distributed Priviot releases, the relevant changelog documents signing and notarization for the specific version. Evidence applies to the exact build that was checked, not automatically to later versions.
For more information about data flows, limitations, and product status, see the transparency overview.
For more information about data flows, limitations, and product status, see the transparency overview.
What you can verify as a user
Download the application only through an official route, check the displayed publisher, and compare the version with its changelog. If a warning appears despite expected signing, investigate the cause rather than bypassing Gatekeeper broadly.
Conclusion
Gatekeeper is Apple's security layer for downloaded applications. It evaluates origin, signing, and notarization and helps detect tampered or untrusted distribution paths.