Security model

Clear boundaries for protected sharing.

Unshown reduces accidental app exposure by creating a separate, filtered window-share target. It does not make the original display safe to share.

Current protection

App exclusion is applied through ScreenCaptureKit filters.
Screen frames remain on the Mac in the active beta path.
The protected output is a dedicated meeting-app share target.

Known limits

The current release does not classify or redact sensitive text. Content inside an allowed app remains visible. Protection is bypassed if the original display or another unfiltered source is shared. Startup source sealing is not enabled in this beta.

Release integrity

The beta DMG is signed with Apple Developer ID, notarized by Apple, and distributed with a stapled ticket. Verify the published SHA-256 checksum after download.

Report a security issue

Send reproducible reports through the Unshown support form. Choose Security report and do not include private screen captures unless requested through a secure follow-up channel.