rapportd

executablemacOS3.7 MBx86_64, arm64

System connectivity manager — handles networking, Bluetooth, Wi-Fi, and peer services

Manages multiple connectivity subsystems including Wi-Fi, Bluetooth LE, VPN, and DNS resolution. Authenticates Wi-Fi connections, communicates with paired Apple devices, and handles AirDrop/sharing services. Exposes 31 XPC services to system applications for network configuration and status queries. Performs cryptographic operations for secure communications and accesses keychain for certificates and credentials. Submits diagnostic telemetry to Apple and enforces content filtering policies. Runs as a privileged system daemon with access to hardware drivers, iCloud sync, and window server controls.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 3.7 MB
UUID: CA3C6472-995F-39D5-9467-DF69F0E685CB
Analyzed: 2026-04-09T10:00:46Z
CDHash: 65bf425311eeedcde3d4795bed8500fb38b15dcff5b792b9e0222762e89f0727

Capabilities

KeychainKeychain access group membership

keychain-access-groups

apple com.apple.airplay.pairing com.apple.hap.pairing com.apple.pairing com.apple.sharing.appleidauthentication com.apple.rapport InternetAccounts com.apple.ProtectedCloudStorage

NetworkPrivileged network daemon access

com.apple.networkd_privileged [object Object]

NetworkMake outgoing network connections

com.apple.security.network.client [object Object]

NetworkListen for incoming network connections

com.apple.security.network.server [object Object]

NetworkiCloud data sync

/System/Library/Frameworks/CloudKit.framework/Versions/A/CloudKit

NetworkVPN, content filter, DNS proxy APIs

/System/Library/Frameworks/NetworkExtension.framework/Versions/A/NetworkExtension

NetworkCore networking (HTTP, FTP, DNS)

/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork

NetworkModern networking framework (NWConnection)

/System/Library/Frameworks/Network.framework/Versions/A/Network

StoragePrivate storage area access

com.apple.private.security.storage.HomeKit [object Object]

StorageAddress book access

/System/Library/Frameworks/Contacts.framework/Versions/A/Contacts

HardwareCommunicate with paired Apple devices

com.apple.CompanionLink [object Object]

HardwareDirect DriverKit driver communication

com.apple.private.driverkit.driver-access

com.apple.private.wifi.driverkit

HardwareException: access additional IOKit user clients

com.apple.security.exception.iokit-user-client-class

IOHIDLibUserClient

HardwareBluetooth LE device access

/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetooth

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

IpcRestricted application group access

com.apple.private.security.restricted-application-groups

group.com.apple.rapportd

IpcShared application group container access

com.apple.security.application-groups

group.com.apple.rapportd

IpcException: access additional Mach services

com.apple.security.exception.mach-lookup.global-name

IpcCommunicate with WiFi peer-to-peer daemon

com.apple.wifip2pd [object Object]

IpcApple identity/messaging services (iMessage)

/System/Library/PrivateFrameworks/IDS.framework/Versions/A/IDS

IpcApple identity/messaging services (iMessage)

/System/Library/PrivateFrameworks/IDSFoundation.framework/Versions/A/IDSFoundation

IpcAirDrop/sharing services

/System/Library/PrivateFrameworks/Sharing.framework/Versions/A/Sharing

AnalyticsSubmit symptom diagnostic reports

com.apple.symptom_diagnostics.report [object Object]

SecurityHardened runtime process

com.apple.developer.hardened-process [object Object]

SecurityPerform WiFi authentication

com.apple.wlan.authentication [object Object]

SecurityKeychain, certificates, code signing

/System/Library/Frameworks/Security.framework/Versions/A/Security

SecurityCryptographic operations

/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit

SystemControl display via SkyLight (window server)

com.apple.private.SkyLight.displaycontrol [object Object]

SystemProcess lifecycle management

/System/Library/PrivateFrameworks/RunningBoardServices.framework/Versions/A/RunningBoardServices

SystemFeature flag evaluation

/System/Library/PrivateFrameworks/FeatureFlags.framework/Versions/A/FeatureFlags

Frameworks50

PowerLog libMobileGestalt.dylib AVFoundation CoreBluetooth CoreFoundation CoreUtils IDS IMFoundation IOKit Contacts MediaRemote CloudKit NetworkExtension Rapport RunningBoardServices Security Foundation libobjc.A.dylib libSystem.B.dylib CFNetwork CryptoKit ExtensionFoundation(weak)Network CorePhoneNumbers CoreUtilsSwift FeatureFlags IDSFoundation LocalStatusKit Sharing libswiftAccelerate.dylib(weak)libswiftCompression.dylib(weak)libswiftCore.dylib libswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dylib(weak)libswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftDispatch.dylib libswiftDistributed.dylib libswiftIOKit.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dylib libswiftQuartzCore.dylib(weak)libswiftSpatial.dylib(weak)libswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dylib libswiftos.dylib libswiftsimd.dylib(weak)

Entitlements121

application-identifier com.apple.rapportd

com.apple.CompanionLinktrue

com.apple.PairingManager.HomeKittrue

com.apple.PairingManager.Readtrue

com.apple.PairingManager.Writetrue

com.apple.SiriVOXService.clienttrue

com.apple.SystemConfiguration.SCDynamicStore-write-accesstrue

com.apple.accounts.appleaccount.fullaccesstrue

com.apple.accounts.idms.fullaccesstrue

com.apple.ahptrue

com.apple.appletv.pbs.allow-screen-savertrue

com.apple.appletv.pbs.allow-sleeptrue

com.apple.appletv.pbs.allow-waketrue

com.apple.appletv.pbs.mediaremotetrue

com.apple.appletv.pbs.user-profilestrue

com.apple.authkit.client.privatetrue

com.apple.avfoundation.allows-access-to-device-listtrue

com.apple.bluetooth.internaltrue

com.apple.bluetooth.systemtrue

com.apple.cdp.utilitytrue

com.apple.coreduetd.allowtrue

com.apple.coreduetd.contexttrue

com.apple.developer.device-information.user-assigned-device-nametrue

com.apple.developer.driverkit.userclient-access

com.apple.DriverKit-AppleBCMWLAN

com.apple.developer.hardened-processtrue

com.apple.developer.homekittrue

com.apple.developer.homekit.background-modetrue

com.apple.developer.icloud-container-environment Development

com.apple.developer.icloud-services

com.apple.extensionkit.host.extension-point-identifiers

com.apple.network.application-service

com.apple.findmy.findmylocate.friendshipservicetrue

com.apple.findmy.findmylocate.locationservicetrue

com.apple.findmy.findmylocate.settingstrue

com.apple.frontboard.debugapplicationstrue

com.apple.frontboard.launchapplicationstrue

com.apple.hid.manager.user-access-devicetrue

com.apple.homekit.private-spi-accesstrue

com.apple.icloud.fmfd.accesstrue

com.apple.mediaremote.device-infotrue

com.apple.nearbyd.beacontrue

com.apple.nearbyd.diagnosticstrue

com.apple.nearbyd.xpctrue

com.apple.nearbyinteraction.backgroundtrue

com.apple.networkd_privilegedtrue

com.apple.nfcd.hcetrue

com.apple.nfcd.hwmanagertrue

com.apple.nfcd.session.fieldOperationstrue

com.apple.nfcd.session.reader.internaltrue

com.apple.private.MobileGestalt.AllowedProtectedKeys

EthernetMacAddress SerialNumber UniqueDeviceID WifiAddressData WifiAddress

com.apple.private.SkyLight.displaycontroltrue

com.apple.private.associated-domainstrue

com.apple.private.avfoundation.capture.desk-view-camera.allowtrue

com.apple.private.ckkstrue

com.apple.private.cloudkit.spitrue

com.apple.private.cloudkit.systemServicetrue

com.apple.private.contactstrue

com.apple.private.coreservices.canmapbundleidtouuidtrue

com.apple.private.corewifitrue

com.apple.private.driverkit.driver-access

com.apple.private.wifi.driverkit

com.apple.private.familycircletrue

com.apple.private.hid.client.event-dispatchtrue

com.apple.private.hid.client.event-monitortrue

com.apple.private.homehubd

com.apple.private.homekittrue

com.apple.private.homekit.pairing-identitytrue

com.apple.private.homekit.pairing-identity.privatetrue

com.apple.private.ids.messaging

com.apple.private.alloy.coreduet.sync com.apple.private.alloy.nearby

com.apple.private.ids.messaging.high-priority

com.apple.private.alloy.coreduet.sync com.apple.private.alloy.nearby

com.apple.private.ids.messaging.urgent-priority

com.apple.private.alloy.coreduet.sync com.apple.private.alloy.nearby

com.apple.private.ids.remoteurlconnectiontrue

com.apple.private.ids.session

com.apple.private.alloy.coreduet.sync com.apple.private.alloy.nearby

com.apple.private.imcore.imremoteurlconnectiontrue

com.apple.private.kernel.global-proc-infotrue

com.apple.private.neagenttrue

com.apple.private.nearbyinteraction.device-presencetrue

com.apple.private.nearbyinteraction.privilegedtrue

com.apple.private.necp.policiestrue

com.apple.private.nehelper.privilegedtrue

com.apple.private.network.interface-controltrue

com.apple.private.octagontrue

com.apple.private.security.restricted-application-groups

group.com.apple.rapportd

com.apple.private.security.storage.HomeKittrue

com.apple.private.sharing.unlock-managertrue

com.apple.private.skywalk.observe-alltrue

com.apple.private.skywalk.observe-statstrue

com.apple.private.skywalk.register-kernel-pipetrue

com.apple.private.skywalk.register-user-pipetrue

com.apple.private.tcc.allow

kTCCServiceLiverpool kTCCServiceAddressBook kTCCServiceBluetoothPeripheral kTCCServiceWillow

com.apple.private.usernotifications.bundle-identifiers

com.apple.RPUserNotificationAppSignIn

com.apple.private.userprofiles.readtrue

com.apple.rapport.Clienttrue

com.apple.rapport.NearbyInvitationtrue

com.apple.rapport.siri-audiotrue

com.apple.runningboard.assertions.rapportdtrue

com.apple.security.application-groups

group.com.apple.rapportd

com.apple.security.exception.iokit-user-client-class

IOHIDLibUserClient

com.apple.security.exception.shared-preference.read-only

com.apple.coredevice com.apple.cameracapture com.apple.appletvservices

com.apple.security.exception.shared-preference.read-write

com.apple.rapportd com.apple.purplebuddy rapportd

com.apple.security.network.clienttrue

com.apple.security.network.servertrue

com.apple.security.temporary-exception.iokit-user-client-class

IOUserUserClient IO80211APIUserClient

com.apple.security.ts.mach-task-nametrue

com.apple.sharing.Clienttrue

com.apple.sharing.DeviceDiscoverytrue

com.apple.sharing.Servicestrue

com.apple.sharing.Sessiontrue

com.apple.springboard.CFUserNotificationtrue

com.apple.springboard.opensensitiveurltrue

com.apple.symptom_diagnostics.reporttrue

com.apple.usermanagerd.persona.fetchtrue

com.apple.wifi.awdltrue

com.apple.wifi.eventstrue

com.apple.wifi.events.privatetrue

com.apple.wifi.manager-accesstrue

com.apple.wifi.wowtrue

com.apple.wifip2pdtrue

com.apple.wlan.authenticationtrue

keychain-access-groups

apple com.apple.airplay.pairing com.apple.hap.pairing com.apple.pairing com.apple.sharing.appleidauthentication com.apple.rapport InternetAccounts com.apple.ProtectedCloudStorage

platform-applicationtrue

seatbelt-profiles

Interesting Strings

Bundle IDs(396)

com.apple.DriverKit-AppleBCMWLAN0) com.apple.PairingManager.HomeKit com.apple.appletv.pbs.allow-wake com.apple.authkit.client.private com.apple.private.wifi.driverkit0#

File Paths(37)

/AppleInternal/Library/BuildRoots/4~B_wrugDOcFKWzLQlTFwy4H9s1XFqfJpuK_yoETs/Library/Caches/com.apple.xbs/Sources/Rapport_executables/Rapport/Pairing/RPPairingSession.swift /AppleInternal/Library/BuildRoots/4~B_wrugDOcFKWzLQlTFwy4H9s1XFqfJpuK_yoETs/Library/Caches/com.apple.xbs/Sources/Rapport_executables/Rapport/Swift/RPUtilities.swift /System/Library/Frameworks/AVFoundation.framework/Versions/A/AVFoundation /System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork /System/Library/Frameworks/CloudKit.framework/Versions/A/CloudKit

iokit_constants(1)

IO80211APIUserClient0)

telemetry(58)

$com.apple.symptom_diagnostics.report &Metrics (Metrics +[RPNWActivityMetrics metricsUsingToken:]-[RPMetrics _activate]

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surfaceentitled

Networking Frameworks

AVFoundation CFNetwork CoreFoundation ExtensionFoundation Foundation IDSFoundation IMFoundation Network libswiftCoreFoundation.dylib

Endpoints(9)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

API Usage

DNA Capability Vector

Location

0

Keychain

1

Network

7

Storage

2

Hardware

5

IPC

7

Analytics

1

Security

4

System

3

Behavioral Profile

URL Endpoints

5

Telemetry Strings

58

File Paths

37

Bundle IDs

396

IOKit Constants

1

Library Functions

0

Structural HashesSHA-256

Code55e85be37f9c43bfc1dc0c4ef3fef0c7a14ff5166da031c7c91e42ab120f0ca2

Imports9786441685fb3de71ba5945a257e9955fe64d9e201eb5ee79bd890a0f4b1a9e6

Frameworks585cac5715d96978dd401510d4caa300d15404f3ba9f54626df7d9f77527b1c4

Classes409a7cb843ac1c8281a0b16dc1c4f7f9897d244b563e5763e6596ec3f506341f

Entitlementsa914be3144d76f92b0131eaf099277870b2a2f4a1162510ec01ec942e33c7666

Symbols25999904c7b8b91a8e77ccdef48a5af473fa316e2ad96ac8370100976e6d32d5

Static Libraries0 / 5922 functions identified

Functions(5922)

0x1000023f8-[RPNWNetworkAgent createPairingConnectionFramer:assign:local:remote:pin:]

0x100002a0csub_100002a0c

0x100002b64sub_100002b64

0x100002ba0sub_100002ba0

0x100002bdcsub_100002bdc

0x100002d68sub_100002d68

0x100002e54sub_100002e54

0x100002e60sub_100002e60

0x100002e68sub_100002e68

0x100002e70-[RPNWNetworkAgent createPairingListener:endpoint:pin:]

0x100003138sub_100003138

0x100003194sub_100003194

0x100003198sub_100003198

0x1000031a0sub_1000031a0

0x100003258+[RPNWUtils createTokenForClient:]

0x100003350+[RPNWUtils getBundleIDForPID:]

0x100003358+[RPNWUtils checkPid:hasEntitlement:]

0x100003628+[RPNWUtils publicKeyFromAgentClient:]

0x1000037d0+[RPNWUtils _quicProtocolOptionsFromParameters:]

0x100003944sub_100003944

Imports1222 symbols from 31 dylibs

libswiftCore.dylib261 Network226 Foundation139 libSystem.B.dylib114 CoreUtils94

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

transparencyStaticKey