System Extensions and DriverKit

System extensions on macOS allow software like network extensions and endpoint security solutions to extend the functionality of macOS without requiring kernel-level access. DriverKit provides a fully modernized replacement for IOKit to create device drivers. System extensions and drivers built with DriverKit run in user space, where they can’t compromise the security or stability of macOS. Once installed, an extension is available to all users on the system and can perform tasks previously reserved for kernel extensions.

Watch the video “System Extensions and DriverKit”


Use the DriverKit framework to create drivers for USB, Serial, NIC, and HID devices that users can install on macOS.

Learn more about DriverKit

Network Extensions

Network extension apps such as content filters, DNS proxies, and VPN clients can be distributed to a user’s Mac as system extensions on macOS.

Learn more about NetworkExtension

Endpoint Security

Endpoint security clients, including Endpoint Detection and Response software and antivirus software, can leverage the EndpointSecurity API to monitor and even block system events to better conform with security policies and protect from potential malicious activity.

Learn more about Endpoint Security