Lightweight MacOS Application Usage and License Monitoring Probe

Corma, an Access management software, seeks to deploy a lightweight probe on user MacOS workstations. The goal is to collect data on installed application usage and associated licenses, similar to solutions like Vanta Agent, without impacting machine performance.

Primary Objectives:

• Develop and deploy a lightweight, non-intrusive probe to collect installed applications, application usage data and license information on MacOS machines.

• It should be enough low level to detect agents installed on the machine, not only traditional desktop apps executables

• Ensure compatibility with professional environments and adherence to security and privacy best practices.

• Integrate collected data into a centralized system for further analysis.

Key Features:

• Detection of installed applications (name, version, publisher, installation path).

• Retrieval of license information (keys, expiration dates, license type).

• Logging of usage times (launch time, duration, frequency).

• Automatic and silent update mechanism.

• Integration with authentication systems : Apple's platform SSO, MDM-injected secret or other relevant methods.

Security Requirements:

• Encryption of collected data (AES-256).

• Secure data transmission via HTTPS (TLS 1.3).

• Compliance with GDPR and user data anonymization.

Expected Deliverables:

• Commented and documented source code (technical README).

• Deployment and uninstallation scripts.

• User documentation for administration and configuration.

• Performance and impact report on test machines.

Required Skills:

• Proven experience in MacOS system development.

• Proficiency in security protocols (TLS, encryption).

• Knowledge of deployment tools (Jamf Pro, Kandji, Mosyle, PKG-building tooling, PPPC profile authoring) and DevOps best practices.

• Experience in data collection and processing (GDPR knowledge is a plus).

Estimated Duration: 4 to 6 weeks (subject to complexity).

Terms:

• Freelance contract with milestone-based payments (30% upon prototype validation, 70% upon final delivery).

• Weekly 30-minute progress meetings for technical alignment.

Success Criteria:

• Functional probe deployed across 100% of the pilot fleet without incidents.

• Collected data is usable and meets expectations.

• Comprehensive and reproducible documentation for internal maintenance.

Next Steps:

• Validation of the specifications with the selected freelancer.

• Access to a test environment provided by Corma.

• Technical kick-off to finalize implementation details.

Required Skills:

• Proven experience in MacOS system development.

• Proficiency in security protocols (TLS, encryption).

• Knowledge of deployment tools (Jamf Pro, Kandji, Mosyle, PKG-building tooling, PPPC profile authoring) and DevOps best practices.

• Experience in data collection and processing (GDPR knowledge is a plus).