Security and Compliance
Keep your fleet secure and compliant with Workbrew.
Guide
Automatically patch vulnerable packages
Guide
Configure endpoint privilege management for Workbrew
Guide
Configure macOS binary allowlisting for Workbrew
Guide
Configure your firewall for Workbrew
Tutorial
Declare policies to block software packages
Explanation
How policies apply to devices in multiple groups
Explanation
How Secret Brew Configurations stay secret
Explanation
How the Workbrew Agent uses elevated privileges
Guide
How to block cask self-installs
Explanation
How vulnerability patching works
Explanation
How Workbrew Console login and SSO enforcement work
Explanation
How Workbrew detects vulnerabilities
Explanation
How Workbrew handles Homebrew Tap trust
Reference
Package vulnerabilities
Guide
Preserve app settings during cask upgrades
Explanation
Using `brew outdated` with Workbrew to list outdated casks
Explanation
Why we recommend FQDN-based allowlisting
Explanation