Most hacks start from a missing security update, and it is much harder to compromise those who install updates quickly. This is what Mana here for — it warns users about newly published vulnerabilities for installed applications.
identifier "com.manasecurity.mana" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = SQY8VN9587