Nadhif

Product Introduction

1. Definition: Nadhif is a lightweight, native macOS utility (~12 MB) designed specifically for developer workstation hygiene, secure storage management, and comprehensive infrastructure auditing. Categorized under developer productivity tools, Mac cleaning utilities, and remote server/website vulnerability scanners, the software requires macOS 15 or later and runs natively on Apple Silicon architecture. It operates via a lifetime license pricing model (approximately $33 with no recurring subscription) and includes a 7-day trial period.

2. Core Value Proposition: Nadhif exists to solve the precarious balance between maintaining disk space on modern developer rigs and ensuring rigorous security postures across local environments, remote Debian/Ubuntu servers, and owned web domains. By coupling a read-only local cleaner—featuring a 7-day restore window—with automated CISA Known Exploited Vulnerability (KEV) checks, Nadhif bridges the gap between routine disk maintenance and proactive cybersecurity auditing without compromising user privacy or introducing telemetry.

Main Features

1. Smart Scan and Read-Only Cleanup: Nadhif performs a comprehensive, read-only scan across localized macOS directories including application caches, system logs, old software installers, developer build artifacts, and the Trash. The engine categorizes every identified item with descriptive metadata explaining its origin and post-cleanup behavior. Safe system caches are pre-selected, while ambiguous items require manual review. Upon execution, files are moved to a temporary "Recently Cleaned" holding directory rather than being permanently purged, granting a 7-day rollback window that restores files to their original paths without overwriting newer filesystem modifications.

2. Developer Tool & Environment De-cluttering: The software targets hidden infrastructural storage hogs unique to software engineers. It inspects and sizes Xcode DerivedData, iOS/Android simulator instances, orphaned package manager caches (npm _cacache, Gradle, Homebrew downloads), and nested node_modules directories inside inactive code repositories (tracked via idle timers). Additionally, it interfaces with Docker daemon storage to prune unused build caches, dangling images (<none>), stopped containers, and unreferenced volumes without relying on aggressive global prune flags like system prune --force.

3. Multi-Tier Security Auditing (Mac, Servers, Websites): Nadhif extends its utility beyond local file management into environment hardening. For the local macOS host, it evaluates security vectors such as FileVault status, firewall configuration, screen lock parameters, and SSH key management, offering direct terminal commands or system preference links to remediate risks. For remote infrastructure, it utilizes read-only SSH connections to audit Debian and Ubuntu instances against the CISA KEV catalog and local apt repositories. For web properties, it executes external black-box scans—verified via DNS challenge records—to inspect TLS certificates, HTTP response headers, hidden configuration files (.env, .git), and outdated software versions (PHP, WordPress, nginx, jQuery) against the National Vulnerability Database (NVD) and OSV.dev.

Problems Solved

1. Pain Point: Developers and power users frequently suffer from acute disk anxiety caused by gigabytes of hidden build artifacts, stale virtual machine simulators, and unmanaged dependency caches scattered across the macOS filesystem, alongside the constant threat of unpatched vulnerabilities in local configurations, remote cloud instances, and web applications. Traditional disk cleaners blindly delete files with zero context, while security scanners are isolated from local workflow maintenance tools.

2. Target Audience: Full-stack software engineers, DevOps practitioners, mobile application developers (iOS/Android), system administrators managing small-to-medium Linux infrastructure, security-conscious Mac power users, and independent web property owners.

3. Use Cases:

   • Reclaiming upwards of 20 GB to 40 GB of solid-state drive space on constrained Apple Silicon MacBooks prior to compiling large native codebases.
   • Performing a rapid pre-deployment audit of a remote Ubuntu or Debian VPS over SSH to verify that critical packages like sudo or OpenSSL are patched against actively exploited CVEs.
   • Verifying that an external domain does not expose sensitive configuration files like .env or load compromised Content Delivery Network scripts (such as historical exploits tied to polyfill.io).
   • Safely uninstalling heavy desktop applications (e.g., Android Studio, Docker, or IDEs) by systematically sweeping associated plist files, application support directories, and cached states from the macOS ~/Library.

Unique Advantages

1. Strengths & Limitations (Pros & Cons):

   • Strengths: Exceptional security-first architecture featuring read-only initial scans, zero data telemetry/cloud syncing, a native Apple Silicon codebase (~12 MB footprint), an invaluable 7-day rollback window for cleaned items, and transparent integration with official vulnerability feeds (CISA KEV, OSV.dev).
   • Limitations: Limited strictly to macOS 15+ and Apple Silicon hardware, excluding older Intel Macs. Server auditing is optimized explicitly for Debian and Ubuntu distributions via SSH, omitting native support for Red Hat-based distributions (RHEL, CentOS, Fedora) or Windows server environments. Active penetration testing features for websites are intentionally restricted unless explicitly toggled on by the user.

2. Key Alternatives & Differentiation:

   • Alternative 1 (Mac Cleaners like CleanMyMac X): Focuses heavily on broad consumer-grade cleanups, malware scans, and software updaters, but relies on subscription-based monetization models and lacks deep, professional developer tooling (such as Docker cache management, stale node_modules cleanup, or remote SSH Linux server auditing). Nadhif utilizes a flat lifetime license fee and focuses directly on developer-centric metrics.
   • Alternative 2 (Dedicated Vulnerability Scanners like Nessus or OpenVAS): Enterprise-grade tools that are overly complex, expensive, and completely decoupled from local Mac workspace maintenance. Nadhif combines desktop hygiene with lightweight, actionable security checks tailored for individual developers and small teams in a single native application.

Frequently Asked Questions (FAQ)

1. Does Nadhif require root access or store my server SSH credentials? No. Nadhif performs all local disk operations within standard user-level permissions, utilizing macOS native authorization dialogs only when modifying system security configurations (such as enabling the firewall). For remote server audits, it connects via read-only SSH using your existing key configurations; private keys and server credentials never leave your local machine, and server inspection commands are strictly non-destructive.

2. What happens if I clean a file by mistake with Nadhif? Files and directories targeted during a Smart Scan or application uninstall are moved to Nadhif's internal "Recently Cleaned" staging area rather than being permanently deleted. You retain a 7-day window to restore any individual file or an entire cleaning session back to its precise original path on your filesystem, provided a newer file has not occupied that exact sector.

3. How does Nadhif check my Debian or Ubuntu servers securely? Nadhif logs into your remote server using your designated SSH key in read-only mode. It queries local package databases (such as apt simulation queries) and compares installed package versions against daily synchronized data feeds from the CISA Known Exploited Vulnerabilities catalog. Nadhif never executes automated remote fix scripts; it provides the exact diagnostic evidence and the corresponding terminal commands for you to review and run manually.

4. Are my personal documents, photos, or passwords ever scanned or exposed? No. Nadhif’s scanning algorithms are architecturally hardcoded to ignore sensitive personal directories, including your Documents folder, Desktop, Photos library, iCloud Drive, user keychains, and SSH private keys. Furthermore, the application operates entirely offline regarding telemetry; no file paths, logs, or personal data are ever transmitted externally.