The CoreGuard blog

Insights

Plain-English guides to what your Mac is actually doing — SSD wear and real SMART data, battery, thermals and fans, and how to verify an app's privacy for yourself. Honest, local-first, and never a scare tactic.

Why Is kernel_task Using So Much CPU? (And Why You Shouldn’t Kill It)

It looks like the villain at the top of Activity Monitor, eating 400% CPU. It’s actually the one thing in there protecting your Mac — macOS cooling the chip. Why it’s a symptom (not the cause), why you can’t kill it, and how to find what’s really running hot.

Read the story

How Hot Is Too Hot? What a “Safe” MacBook Temperature Really Is

Everyone wants a magic Celsius line, but Apple never published one — the only number it gives is a room-temperature range, not a chip limit. The honest read is the pattern: warm under load then cooling is normal; pinned-hot at idle is a process to find. Why throttling is protection, not a fault.

Read the story

Is CleanMyMac Worth It? What Your Mac Actually Needs

It’s a legitimate, well-made app — the “is it safe” question is easy. The interesting one is whether you need a cleaner, when modern macOS already manages memory, caches and storage (per Apple’s own docs). A fair take, and why a slow Mac needs a diagnosis, not a deletion.

Read the story

Mac Battery Health Dropping Fast? What Cycle Count Actually Tells You

Maximum Capacity dropped a few points and your stomach sank — but that number is an estimate that wobbles, and a fast early drop is usually normal. What Maximum Capacity and cycle count really mean, what “Service Recommended” says, and the honest short list of when to act.

Read the story

Mac Battery Draining Overnight, Lid Closed? What Actually Wakes It

Close the lid at 100%, open it at 74% — usually the Mac wasn’t really asleep, something kept waking it. What’s normal, why Apple Silicon sleeps differently (no SMC, no hibernatemode tuning), and how to read the exact wake reason with pmset -g assertions.

Read the story

Is My Mac’s SSD Failing? What SMART Can and Can’t Tell You

Your Mac has a built-in health flag for its drive and real wear numbers underneath — but the reassuring “Verified” is the most misunderstood word in the subject. The honest signals, how to read SMART and wear with built-in tools plus smartctl, and why a backup — not a status — is the real protection.

Read the story

How to Check a Used MacBook Before Buying — the 15-Minute Test

A used MacBook is a great deal or an expensive mistake, and the difference is fifteen minutes with built-in tools. The whole test in order: Activation Lock (the deal-breaker to settle first), serial & coverage, battery cycles, SMART, and a hands-on pass — honest about what each check proves.

Read the story

Activity Monitor Alternatives — and What It Can’t Tell You

Activity Monitor is a good live process monitor — but it shows no temperatures, no fan speed, no SSD wear, no battery health, and no history. The real tools that fill each gap, free first (Stats, coconutBattery) and paid where it’s worth it (iStat Menus, TG Pro), recommended straight.

Read the story

Is My Mac Dying? Usually Not — Here’s How to Tell

The fan’s roaring, the beachball won’t quit, the battery says “Service Recommended.” Usually it’s one nameable, fixable thing — not death. How to read each real signal (battery, SSD/SMART, heat, panics, display) with tools already on your Mac, and when to actually worry.

Read the story

mediaanalysisd Isn’t a Virus — It’s Visual Look Up (and Sometimes a Runaway Cache)

mediaanalysisd is pinning your CPU and com.apple.mediaanalysisd has eaten tens of GB of disk. It’s Apple’s Visual Look Up & Live Text engine — usually a harmless backlog, but since macOS 15.1 a reported bug makes it loop. What it is, and how to calm it.

Read the story

coreduetd Isn’t a Virus — It’s Your Mac Learning Its Own Habits

Fans up, Mac warm, and Activity Monitor blames coreduetd. It’s Apple’s CoreDuet daemon learning your habits for Handoff and suggestions — usually harmless. The one test that tells “busy” from “stuck,” and how to calm it without deleting anything.

Read the story

searchpartyd Isn’t a Virus — It’s Find My Watching for Lost Devices

A process called searchpartyd is burning CPU and the name sounds like it’s scanning you. It isn’t — it’s Apple’s Find My daemon. Why it spikes, the 30-second Bluetooth test that proves it, and how to calm it without weakening your Mac’s security.

Read the story

‘System Data’ Isn’t a Thing You Can Delete

Your Mac’s Storage bar says “System Data: 120 GB” with no button to open it. It’s mostly APFS snapshots, purgeable space and caches — not junk you delete. What it really is, and why deleting things makes it grow.

Read the story

What Is photoanalysisd? (And Why It’s Pinning Your CPU)

That process eating your CPU in Activity Monitor is usually Apple’s Photos analyzer — not a virus. Why it spikes, how long it lasts, how to verify it’s genuine, and when to actually worry.

Read the story

A Fake SSD Can Copy the Label — Not the Evidence

Flash got expensive, so counterfeit SSDs spread. A fake “990 Pro” can ace the label and still crawl at USB-2 speeds and flunk a maker’s check. Here’s what your Mac can actually read — and the honest limits.

Read the story

What Is syspolicyd? Why It Hits 180% CPU on Your Mac

Hot Mac, screaming fans — and the app you’d blame is at 2% CPU. The heat is a reported ~4000 git/sec storm billed to syspolicyd and trustd, not the app. The mechanism, and how to spot it.

Read the story

Your Mac Battery Didn’t Age Overnight — a Process Started Eating It

After a macOS update the battery tanks and everyone blames the battery (or installs a “cleaner”). It’s usually one named process — here’s how to find yours in two minutes, free.

Read the story

Free Space Is a Lie: How a Local AI Tool Quietly Spent My SSD’s Endurance

Free space barely moved, the file stayed small, SMART said “OK” — and a local AI tool still wrote a reported 37 TB in three weeks. The forensic walk-through, and why your dashboards never flinched.

Read the story