Cap
Cap records your screen, camera and sound, with tools to edit videos and share them as links. It’s made by Cap Software, based in the United States.
What it is
People use Cap to make tutorials, explain a problem or show someone how to use software. It can record a whole screen, one window or a selected area, then edit and export the video.
Cap needs screen recording access to capture what you select. Camera and microphone access let it include your face and voice. Accessibility access lets it follow clicks and cursor movements for automatic zoom, and resize other apps’ windows.
Studio Mode keeps recordings on your Mac until you choose to share them. Instant Mode uploads while recording. Public recordings can be watched by anyone with the link; private and password protected sharing are also available. Cap publishes its source code.
Who makes it
Cap Software is a US software company behind Cap, a screen recording project started in 2023. Its legal name is Cap Software, Inc.. Its website is cap.so.
Is it the real one?
Every Mac app carries a signature from the developer who made it. Apple checks who the developer is before handing out the certificate, and macOS refuses to open an app whose signature has been tampered with.
The real Cap is signed by Richard McIlroy, Apple team ID 47B7FCLL43. A copy signed by anyone else isn’t from Cap Software. HARD’s Mac app checks this for you; to check by hand, open Terminal and run codesign -dv "/Applications/Cap.app", and look for that TeamIdentifier.
Its bundle ID, the name macOS knows it by, is so.cap.desktop. Download it only from cap.so, not from an ad or a link someone sends you.
What it connects to
In normal use, Cap talks to these places on the internet. A firewall that asks before apps connect, like the one in HARD’s Mac app, will show them.
| Address | Why |
|---|---|
cap.so | Sign-in, recording management and sharing. |
cdn.crabnebula.app | Update checks and downloads. |
github.com | Downloads speech models for local captions. |
huggingface.co | Downloads a model for caption word timings. |
What it can see
macOS asks you before an app can use these. You can change them any time in System Settings → Privacy & Security.
| Permission | What it’s for |
|---|---|
| Screen & System Audio Recording | Records the selected display, window or area and supported computer audio. |
| Accessibility | Tracks clicks and cursor movements for automatic zoom, and resizes other apps’ windows. |
| Camera | Records camera footage, including a camera overlay. |
| Microphone | Records your voice or another selected microphone. |
Security record
Problems with Cap or Cap Software in the last three years, newest first. Keeping the app up to date covers the ones that were fixed.
| When | What happened | Source |
|---|---|---|
| Cap merged server security fixes restricting media inputs and blocking cloud storage requests to private network addresses. | ↗ | |
| Cap merged access checks to stop users listing or adding videos in folders, spaces and organisations they lacked permission to use. | ↗ | |
| CVE-2026-69113 disclosed that signed-in users could post comments on other users’ private recordings; an access-check fix was merged on 3 August. | ↗ | |
| Cap merged access checks after transcripts and AI-generated information from private or password protected videos were accessible without permission. | ↗ | |
| Cap merged fixes for unauthorised access to private video thumbnails and view counts, and overly permissive cross-site access rules. | ↗ |
References
- Cap cap.so
- About Cap cap.so
- Cap Data Processing Agreement cap.so
- Download Cap cap.so
- Cap installation and updates cap.so
- Cap Studio Mode cap.so
- Share a Cap cap.so
- Cap changelog cap.so
- Cap desktop bundle identity and update configuration github.com
- Cap desktop transcription model downloads github.com
- Cap desktop permission explanations github.com
- Harden media inputs, custom storage and processing errors github.com
- Add ownership checks to folder, space and organisation video actions github.com
- NVD: CVE-2026-69113 nvd.nist.gov
- Fix requiring video access before posting a comment github.com
- Require access checks on transcript and AI information endpoints github.com
- Protect thumbnail and view-count endpoints and tighten cross-site access github.com
- The signature on a real installed copy, read by HARD with
codesign.