What Anomalous is
Anomalous watches your Mac quietly and, when something is genuinely wrong, tells you in plain language what it is, whether it is normal, and the one safe thing to do.
The problem
Your Mac can be busy for days with something genuinely wrong, and nothing tells you. Activity Monitor, iStat Menus, and every other monitor render CPU, memory, GPU, and network beautifully — and then stop. They show you what is using resources and leave you to be the analyst who figures out whether it matters.
Anomalous exists because of a real case: fans spinning, and Activity Monitor showing mysqld and dasd near the top but not why. Half an hour of manual digging turned up what the OS had quietly tolerated for two days — a scheduler daemon wedged in a loop, burning CPU-hours and tens of gigabytes of memory, plus queue workers hammering the database hundreds of times a second. Every runaway had a detectable signature for days. Nothing surfaced it.
What Anomalous does differently
Anomalous watches your machine across every measurable dimension, stays silent while things are normal, and only when something is genuinely wrong surfaces a plain-language card: what the process is, whether it is normal for your Mac, why it is behaving this way, and the one safe thing to do about it.
The difference is that it gives an answer, not more data. Other tools stop at a number or a graph because answering is hard and being wrong is expensive. Anomalous takes on that work — a reviewed corpus, conservative safety tiers, confidence scoring, and a strict habit of failing to “unknown” rather than guessing. It isn’t competing with Activity Monitor; it is replacing the human analyst those tools assume you’ll be.
The three questions macOS never answers
Every Anomalous verdict answers three things your Mac won’t:
- Is this normal? — the baseline question. Measured against what is normal for your machine, not an arbitrary threshold. See How your baseline is learned.
- What even is this? — the identity question. Resolving an unfamiliar process name into something you can reason about. See What we inspect, and why.
- Now what? — the action question, with safety built in. At most one action it is confident is safe, or none at all. See Safety tiers & safe actions.
What it is not
Anomalous is deliberately narrow:
- Not a dashboard. There is nothing to administer, no graphs to babysit. Silence is the default state, and the brand.
- Not a cleaner. No cleanup theater, no manufactured anxiety, no “issues found” to scare you into a purchase. It only ever speaks about a verified anomaly.
- Not an app store or updater. It watches behavior; it doesn’t manage your software.
- Not a chatbot. There is no prompt box and no assistant persona, anywhere. You get diagnosis cards and guided steps — never a conversation. When AI is used, it only explains verified facts; it never decides what is wrong. See The three AI tiers.
Free sensor, paid answers
The sensor — detection, baselines, and the anomaly report — is free and open source (Apache-2.0). It is open because trust is the product: you can read exactly what it measures and what, if anything, it sends. Detection and judgment run entirely on your Mac.
The paid layer is cloud triage: when you want a deeper answer on a specific anomaly, “Get Help” escalates it to a hosted model and spends prepaid credits. You only pay when you ask. See Accounts, tokens & Get Help and Privacy & what leaves your Mac.
Ready to install? Start with Install & first run.