No. syspolicyd is macOS security.
It runs as root from /usr/libexec/syspolicyd.
syspolicyd is “partly” network-related: most checks use tickets stapled to the app, but for apps without one it can ask Apple's notarization service. That's a short request when you first open a new app. Blocking it can slow down or prevent opening downloaded apps.
Facts
- Owner
- Apple (part of macOS)
- Network-related
- Yes
- Typical ports
- 443
- Block it?
- Don’t block it
What it connects to
| Host | Country | Purpose |
|---|---|---|
| Apple notarization services | Various | Checking app notarization tickets |
Should you worry?
No. syspolicyd is macOS security. High CPU right after downloading or installing apps is it scanning them; it settles down.
Frequently asked questions
What is syspolicyd?
The macOS daemon that enforces Gatekeeper, checking that apps are signed and notarized before they run.
Why is syspolicyd using high CPU?
It's assessing newly downloaded or updated apps. It finishes on its own.
Does syspolicyd send my apps to Apple?
No. It checks the app's signature and, when needed, asks Apple about the notarization ticket; it doesn't upload the app.