> For the complete documentation index, see [llms.txt](https://help.nightfall.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.nightfall.ai/data-exfiltration-prevention/exfiltration_endpoint/additional-methods-to-install-nightfall-ai-extension/manually-install-the-nightfall-safari-extension.md).

# Manually Install the Nightfall Safari Extension

The Nightfall Safari extension is a signed package inside the macOS agent download. It is not installed by the browser-extension configuration profile, and it is no longer distributed through the Mac App Store or Apple Business Manager.

Use this page for a Mac that is not managed by MDM, or for an endpoint where you are performing manual installation or testing. For a managed fleet, use Deploy the Nightfall Safari Extension with MDM.

## Prerequisites

* A Mac running macOS
* Administrator credentials to install the package
* The Nightfall endpoint agent installed on that Mac. The extension communicates with the agent daemon and requires the agent to be running.

## Install the package

1. In the Nightfall console, download the macOS agent bundle. Use a bundle from macOS agent 1.2.15.7 or later.
2. Open the `safari_extension` folder in that bundle and locate the Safari `.pkg`.
3. Double-click the package and follow the installer. macOS will prompt for an administrator password.
4. The installer places the container app at `/Applications/Nightfall DLP for Browsers.app`. Quit and reopen Safari so it can discover the extension.

## Enable the extension

Installing the package does not turn the extension on. Safari requires explicit user consent.

1. Open **Safari → Settings → Extensions**.
2. Select **Nightfall DLP for Browsers** and turn on the checkbox. Approve the macOS prompt if one appears.
3. Turn on **Allow in Private Browsing**.
4. Click **Always Allow on Every Website...** and confirm.

All three settings are required. Turning the extension on alone leaves private browsing and per-site access unset, and the extension will not inspect sites it has not been granted.

{% hint style="info" %}
If the extension controls are greyed out with the message "This extension's state has been configured by device management," your MDM has already force-enabled the extension. No manual action is required.
{% endhint %}

## Verify

Run the following commands in Terminal to confirm the container app is present and verify its version:

```bash
ls -d "/Applications/Nightfall DLP for Browsers.app"
defaults read "/Applications/Nightfall DLP for Browsers.app/Contents/Info.plist" CFBundleShortVersionString
```

In **Safari → Settings → Extensions**, the extension should be enabled, allowed in Private Browsing, and allowed on every website. The device should show the Safari extension as connected in the Nightfall console.

## Updates

When the Nightfall agent is installed, it updates an extension that is already present. The updater does not perform the first install. A Mac that never received the package stays uncovered until the package is installed.

## Troubleshooting

**The extension is enabled, but nothing is happening.** The extension needs the Nightfall agent daemon to inspect traffic. Confirm the agent is installed and running. Once the agent is up, the extension starts working immediately without needing to be re-enabled.

**The package is installed, but Safari does not list the extension.** Quit and reopen Safari. Safari enumerates extension containers at launch. If it is still missing, confirm the container app is present with the command above.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://help.nightfall.ai/data-exfiltration-prevention/exfiltration_endpoint/additional-methods-to-install-nightfall-ai-extension/manually-install-the-nightfall-safari-extension.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.