Security at NTFSTool

Security is a core promise of NTFSTool. It reads and writes NTFS drives on your Mac with no kernel extension, no lowered security settings, and code that anyone can read.

Apple-notarized
No kernel extension
MIT open source
App Sandbox
72-hour response

Effective Date: November 2, 2026

Why you can trust NTFSTool

We have shipped NTFSTool since 2020. We chose a design where a driver problem stays inside the driver, we publish the source so you do not have to take our word for it, and we reply to security reports within 72 hours.

No kernel extension

Current NTFSTool uses no kernel extension. For about four years NTFSTool shipped kernel extension releases, and we retired that approach: with NTFSTool's drivers, a problem stays inside the driver instead of the core of macOS.

No Recovery Mode, no Reduced Security, no SIP changes, and Apple Pay keeps working.

Open source on GitHub

The app, the FSKit file-system module and the driver glue code are MIT-licensed on GitHub (4,000+ stars). Read the code and build the app yourself.

Details

Sandboxed free edition

The free edition on the Mac App Store goes through Apple's App Review and runs in the macOS App Sandbox. The open-source edition makes no network requests at all.

Safe by default

If Windows left a drive hibernated or Fast Startup is on, NTFSTool mounts it read-only and tells you how to fix it instead of risking your data. NTFSTool verifies writes, and Pro checks drives before repairing them.

Also: NTFSTool Pro is Apple-notarized. NTFSTool is primarily a local utility; in most cases, it operates on your device without uploading your files or disk contents to our servers. Diagnostic reports never include the contents of your files; see the Privacy Policy.

Open source on GitHub

The open-source edition lives at github.com/ntfstool/ntfstool under the MIT license. Its latest release is v5.0.4, and the project has 4,000+ stars.
The app, the FSKit file-system module and the driver glue code are open source under the MIT license. The NTFS engine (libntfstool-driver) is bundled in the repository as a prebuilt library.
Anyone can read this code and build the app from source: the README explains the steps, and the build command is make app.
The open-source edition is derived from the free NTFSTool on the Mac App Store and shares its architecture. NTFSTool Pro shares the same NTFS engine and FSKit module as the open-source edition.
The open-source edition makes no network requests, and the app's entitlements contain only the App Sandbox.
Pro is a separate commercial app with its own license and activation; it shares the same NTFS engine and FSKit module as the open-source edition.

How we handle a report

ReportEmail us the details.
Confirmed in 72 hoursA real person replies by email.
Assess and reproduceWe keep you updated on progress.
Fix and releaseWe publish an update and keep maintaining the software.
Thanks and rewardCredit if you want it, and Pro license codes.

We do not promise a fixed time to fix, because it depends on the issue. Please give us reasonable time to fix it before you disclose it, usually up to 90 days, and we will coordinate the disclosure date with you.

Report a vulnerability

Email service@ntfstool.com with a subject that starts with [Security]. Please include:

the affected product and version (for example NTFSTool Pro and its version number, or the Mac App Store edition) and your macOS version;
steps to reproduce the issue;
the impact, in your own words;
optionally, a proof of concept (PoC).

Our machine-readable contact file is at /.well-known/security.txt.

In scope

NTFSTool Pro and its built-in drivers and FSKit module;
NTFSTool free edition on the Mac App Store and the open-source edition on GitHub;
ntfstool.com and its license, activation and checkout endpoints.

Out of scope

social engineering or phishing of our team or users;
denial of service and load or stress testing;
spam;
third-party services themselves, such as Payhip, Waffo and Creem;
issues that need physical access to an unlocked Mac;
automated scanner output without a working PoC;
issues that are already public or already known to us.

Rules

Test only on your own devices and accounts.
Do not access, modify or destroy other people's data.
Do not disclose the issue publicly before we have fixed it.

Good-faith research

If you follow this policy and act in good faith, we will not pursue legal action against you for your research, and we will work with you to understand and resolve the issue.

Security Rewards

We would rather pay for a bug report than lose a user's trust.

NTFSTool touches your drives, so we want the people who look hardest at it on our side. When you help make it safer, we thank you with the product itself.

For every valid vulnerability that we accept, we give you 1 to 10 NTFSTool Pro Lifetime License activation codes. We decide the number based on severity.
Only the first reporter of each distinct vulnerability is rewarded.
Rewards are license codes, not cash.
Duplicate reports, out-of-scope issues and issues we cannot reproduce are not eligible.
If you want, we will credit you by name in our acknowledgements. We do this only with your consent.

Report a vulnerability

Frequently asked questions

How quickly will NTFSTool respond to a security report?

We reply by email within 72 hours of receiving your report to confirm it, and we keep you updated on progress after that. We do not promise a fixed time to fix, because it depends on the issue.

Does NTFSTool use a kernel extension?

No. Current NTFSTool uses no kernel extension and never asks you to start in Recovery Mode or lower your Mac's security settings. A problem inside a driver stays inside the driver.

Is NTFSTool open source?

Yes. The app, the FSKit file-system module and the driver glue code are open source under the MIT license on GitHub at github.com/ntfstool/ntfstool, and anyone can read them or build the app themselves. The NTFS engine (libntfstool-driver) is bundled as a prebuilt library. NTFSTool Pro shares the same NTFS engine and FSKit module as the open-source edition.

Is NTFSTool notarized by Apple?

Yes. NTFSTool Pro is Apple-notarized. The free edition on the Mac App Store goes through Apple's App Review and runs in the macOS App Sandbox.

Does NTFSTool upload my files?

NTFSTool is primarily a local utility. In most cases it operates on your device without uploading your files or disk contents to our servers. Diagnostic reports never include the contents of your files.

What do I get for reporting a vulnerability?

If we accept a valid vulnerability, you receive 1 to 10 NTFSTool Pro Lifetime License activation codes, depending on severity as decided by us. Rewards are license codes, not cash.

How do I report a security problem?

Email service@ntfstool.com with the subject starting with [Security]. Include the affected product and version, steps to reproduce, the impact, and an optional proof of concept.

Can I disclose the issue publicly?

Please give us reasonable time to fix it before you disclose it, usually up to 90 days. We will coordinate the disclosure date with you.