You didn't notice.
Greypaint did.
One updater for every app on your Mac.
macOS 26.2 or later · Apple silicon · free
It reads the updater
each app already has.
It asks all four, and answers in one list.
Sparkle appcasts
The feed most indie Mac apps already publish.
Homebrew casks
Whatever you installed with brew, without a terminal.
GitHub releases
For the apps that ship straight from a repository.
Mac App Store
Counted here, opened where macOS insists.
You decide how far it goes.
It checks with the window closed.
Autopilot
Security fixes install quietly. Everything else waits for you, or nothing does.
On your schedule
Hourly, every six hours, daily — or never, unless you ask.
Nothing about your Mac
leaves your Mac.
It reads the feeds your apps already read.
No account
Nothing to sign in to.
No telemetry
No analytics, no crash pings.
Nothing uploaded
Versions compared on your own disk.
Always reversible
Every update keeps the last one.
Questions.
The ones worth answering before you install it.
Does it need my password?
Usually not. Most apps are replaced in place without a prompt. A few are distributed as installer packages — Karabiner-Elements and Cloudflare WARP among them — and macOS requires administrator approval to install those. In that case you will see the standard system prompt, and you can cancel it.
What about apps from the App Store?
macOS does not allow apps installed from the App Store to be updated by anything else. Greypaint still checks them and shows you which ones are behind, and the button opens the App Store so you can finish the update there.
What if an update causes a problem?
Greypaint saves a copy of the current version before it replaces an app, so you can return to it in one click from that app's details. Copies are kept for seven, fourteen or thirty days, whichever you set in Settings.
Can I exclude an app?
Yes. Ignore an app and Greypaint stops checking it, counting it and updating it. Ignored apps are kept in a separate list, and you can restore any of them whenever you want.
Does it work for apps I didn't install with Homebrew?
Yes. Greypaint checks each app against whichever source tracks it — an update feed inside the app itself, a Homebrew cask, a GitHub release, or the App Store — regardless of how the app was installed.