Support macOS Version-Based Device Posture Check Rules Instead of OS Name Detection Planned

Evan Merritt

During our recent session, we identified that macOS devices are currently classified under a generic “macOS” label after removing OS distribution-based checks (e.g., Tahoe, Sonoma, Sequoia).
While this resolves the immediate issue, it introduces a limitation in compliance granularity.
We are requesting support for:
 

  • macOS version-based detection (e.g., 14.x, 15.x, etc.)
  • Policy rules based on version thresholds (>=, <=, ranges)
  • Separation of OS family (macOS) from OS version attributes

This enhancement would provide:
 

  • More accurate and future-proof compliance enforcement
  • Reduced dependency on OS naming conventions
  • Improved consistency across macOS updates
  • Easier long-term policy maintenance at scale

This requirement was identified during a live session and agreed as a valuable product improvement opportunity.

Comments

1 comment

  • Comment author
    Eda Ercan
    • Official comment

    Hi Evan Merritt, thanks for the suggestion! We reviewed your request and added it to our roadmap for this year. We'll keep you posted as things move forward.

Please sign in to leave a comment.