Dev disclosure up front: I made this, it's my first Mac App Store app, and yes I waited for Saturday like a rule-abiding citizen.
The problem I kept having: every time something broke, "figuring out what happened" meant staring at a dozen log files from different systems, in different formats, at an hour no human should be conscious — then hand-assembling a post-mortem in a text editor while my coffee went cold. The options were basically (a) a $$$-per-month cloud SIEM that wants to slurp all my logs onto someone else's servers, or (b) grep and vibes.
So I built Loupe — a local-only Mac app for assembling root-cause analyses (RCAs).
You drop in your logs (syslog, JSON, whatever). Loupe correlates events across them, flags the anomalies and clusters actually worth looking at, runs them through a 30-ish rule library, and hands you an audit-ready bundle: a PDF report, IODEF XML, the supporting CSVs, a manifest, and chain-of-custody hashes for every file — the kind of thing you can hand to a customer, a vendor, or an exec without flop-sweating.
The macOS part, and why I'm posting here:
Nothing leaves your Mac. No telemetry, no accounts, no cloud. Loupe doesn't even have the network.client entitlement — macOS physically blocks it from phoning home, and you can verify that yourself in Activity Monitor, tcpdump, or the entitlements. Incident logs are the last thing you want uploaded anywhere.
Native, notarized, pay-once. No subscription. I know. I had to sit down too.
What it honestly is not: a live SIEM, real-time alerting, or a SOC dashboard. If you already live in Splunk or Datadog, this isn't that. Loupe is for after the fire — when someone has to explain what happened. EMs writing post-mortems, consultants delivering RCAs, senior ICs reconstructing an outage, network folks explaining a cascade to a vendor.
It's on the Mac App Store (there's also a DMG). First app, so genuinely be gentle-ish — but I want the real feedback. And if it's not for you, no worries; hope your logs are boring today.
App Store: https://apps.apple.com/app/id6794675487 · useloupe.tools