System Extensions and DriverKit

System extensions on macOS allow software like network extensions and endpoint security solutions to extend the functionality of macOS without requiring kernel-level access. DriverKit provides a fully modernized replacement for IOKit to create device drivers. System extensions and drivers built with DriverKit run in user space, where they can’t compromise the security or stability of macOS. Once installed, an extension is available to all users on the system and can perform tasks previously reserved for kernel extensions.

Watch the video “System Extensions and DriverKit”

DriverKit

Use the DriverKit framework to create drivers for USB, Serial, NIC, and HID devices that users can install on macOS.

Learn more about DriverKit

Network Extensions

Network extension apps such as content filters, DNS proxies, and VPN clients can be distributed to a user’s Mac as system extensions on macOS.

Learn more about NetworkExtension

Endpoint Security

Endpoint security clients, including Endpoint Detection and Response software and antivirus software, can leverage the EndpointSecurity API to monitor and even block system events to better conform with security policies and protect from potential malicious activity.

Learn more about Endpoint Security

Get Started with Xcode

Download the latest version of Xcode from the Mac App Store to start building your system extensions and drivers.

View downloads

View deprecated KPIs and alternatives

Discuss on Forums

Ask questions and discuss system extensions and DriverKit with Apple engineers and other developers.

View system extension forums

View DriverKit forums

Request an Entitlement

If you plan to deploy drivers built with DriverKit, allow other developers to use your system extensions, or use the EndpointSecurity API, you’ll need to request an entitlement from Apple.

While your request is in review, you can test system extensions on your Mac by temporarily turning off System Integrity Protection.