What Is Apple Notarization?

When a developer submits a macOS app to Apple's notarization service, Apple's servers scan the binary for known malware, check that it uses a valid Apple Developer ID signature, and verify that it meets a set of hardened runtime requirements designed to prevent code injection and privilege escalation. If the scan passes, Apple attaches a notarization ticket to the app. This ticket can be "stapled" to the app bundle so that macOS Gatekeeper can verify it without an internet connection when a user opens the file.

From a user's perspective, notarization produces the "Apple checked it for malicious software" message that appears in the quarantine dialog when opening a downloaded app for the first time. Apps that are not notarized trigger a stronger warning stating that the developer cannot be verified, and on recent macOS versions require navigating to System Settings > Privacy & Security to override. Notarization does not mean Apple endorses the app's functionality — it means the automated scan found no known malware at the time of submission.

For screen recording apps, notarization matters because they request sensitive permissions including screen capture access. A notarized recorder has been verified against Apple's security standards and signed with a Developer ID that can be revoked if the developer distributes malware. Limelight is notarized by Apple, meaning it passes through the standard Gatekeeper check on macOS 14 and later without requiring security overrides. This is part of Limelight's design as a trustworthy local tool — it records offline and has passed Apple's automated security process.