ProcessSpy is a native macOS process monitor that provides per-process CPU and memory history, finished process recall, CPU QoS breakdown, real-time disk I/O, JavaScript filtering, and aggregate hierarchy views — replacing the limited Activity Monitor for developers and power users.
What is ProcessSpy?
ProcessSpy is a macOS application that monitors every running and finished process on your Mac. It takes input from the system’s native APIs and outputs detailed visual timelines, command-line arguments, environment variables, digital signatures, and process hierarchy aggregates. Built by solo developer Robert and available for macOS 14 and newer, it runs entirely locally — no data is sent to the internet.
Key Features
- Per-process CPU & memory history — logs historical CPU, memory, and thread data with visual timelines; export to CSV.
- Finished process recall — remembers terminated processes including command line, environment variables, and how much time remains before they are forgotten.
- CPU QoS breakdown & memory footprint — shows system‑level quality‑of‑service classes and peak memory tracking, unlike Activity Monitor.
- Real-time disk I/O & memory pressure rates — monitors per‑second reads/writes and memory pressure, updated live.
- JavaScript filters & regex search — filter processes using custom JavaScript or search with regular expressions across multiple properties (e.g., process name + command line).
- Advanced Tree View — groups child processes and links XPC services by responsible PID; shows aggregate totals for CPU, memory, and threads.
- Menu bar dashboard — compact drop‑down with real‑time system health, JavaScript filters, and secondary process details (developer signatures).
- Inspector pane — reveals native vs. emulated architecture, digital signature status, bundle ID, entitlements, Info.plist, and startup entry type.
Who is ProcessSpy for?
- Developers distinguishing same‑name JVM processes by JDK version, path, and full command line.
- System administrators monitoring macOS servers or workstations with real‑time disk I/O, memory pressure, and finished process auditing.
- Power users who need to identify resource hogs, inspect app signatures, or export historical CPU/memory data to CSV for analysis.
Use cases
- Troubleshoot performance spikes — review historical CPU and memory timelines to find when a process spiked, then export the data.
- Verify app legitimacy — use the Inspector pane to check an app’s digital signature, bundle ID, and startup entry type (daemon, agent, etc.).
- Track background helpers — the Advanced Tree View reveals how many helper processes an app spawns and their combined resource usage.
How does ProcessSpy work?
Download the Apple‑notarized .dmg from the official site or install via Homebrew (brew install --cask processspy). Launch the app; it uses native macOS APIs to collect process data. The free version includes core monitoring; paid features (environment variables, entitlements, history export) unlock via a license purchased on Gumroad for $34.99 (lifetime updates, unlimited devices). ProcessSpy is also available on Setapp.
Pricing
ProcessSpy is freemium. The free version offers full functionality except advanced history, deep inspection, and export features. A paid license costs $34.99 (lifetime updates, unlimited devices) via Gumroad or via Setapp subscription.
FAQ
Is ProcessSpy safe to install?
Yes — it is Apple‑notarized, signed, and distributed as a .app inside a .dmg. It runs entirely on your Mac with no remote data collection.
Does ProcessSpy support older macOS versions?
No — it requires macOS 14 or newer. It supports both Apple Silicon and Intel Macs.
