What you are seeing
Activity Monitor shows AgenShield near the top of the CPU list even when your Mac is otherwise quiet. Typical readings on an affected version:
The Mac may also feel slower to launch programs at busy moments, and the battery
drains faster on a laptop.
What it means
Your Mac is still protected and nothing is being blocked incorrectly. The CPU goes to AgenShield’s own housekeeping. Affected versions check the state of the security extension, configuration profiles and installed coding assistants much more often than they need to, launching several small system tools a second to do it. Every one of those launches is then inspected by the security extension too, so the two costs add up. The cost grows with how busy the Mac is: several coding assistants open at once, large builds, and other security software all increase it.Affected and fixed versions
2026.9.1 added an extra configuration-profile check to every status read, which
made the problem more noticeable than on 2026.9.0.
Why there are so many AgenShield processes
Several AgenShield processes are normal. Each has its own job:
On versions before
2026.10.0 the dashboard window was also named
AgenShield, so Activity Monitor showed two entries named “AgenShield” with the
same icon. They are the menu bar app and the dashboard, not two copies of the
same app.
What to do
1
Update to the fixed version
2026.10.0 and later launch far fewer system tools in the background, stop
re-checking AgenShield’s built-in tools every minute, and pause the dashboard’s
background refresh while its window is hidden.2
Close the dashboard when you are not using it
On affected versions the dashboard keeps refreshing even when its window is
hidden behind others. Closing it removes that part of the load. The menu bar
app keeps protecting the Mac.
How to confirm it is fixed
After updating, open Activity Monitor, choose All Processes, and search forAgenShield. With your usual apps open, the agenshield (root) process should
sit at a few percent most of the time, and the security extension should drop
noticeably compared to before. Short peaks while you launch many programs at once
are normal.
A separate cause worth ruling out
If the high CPU starts right after installing or updating and settles within a few minutes, see Slow after install or update instead. That is AgenShield taking its first inventory of the Mac, which is expected and temporary.When to escalate
Contact support if, on2026.10.0 or later, either AgenShield root process stays
above about 10% CPU for more than ten minutes while the Mac is otherwise idle.
Include a diagnostic bundle (see
Collecting diagnostics). The bundle now
records which part of AgenShield is using the CPU, so we can answer without a
round trip.