diff --git a/package.json b/package.json
index 1fa3d5a..7153f80 100644
--- a/package.json
+++ b/package.json
@@ -34,6 +34,7 @@
     "mac": {
       "appId": "de.t7n.apps.mqtt-explorer",
       "category": "public.app-category.developer-tools",
+      "hardenedRuntime": true,
       "publish": [
         "github"
       ],
@@ -61,7 +62,8 @@
       "buildResources": "res",
       "output": "build"
     },
-    "afterPack": "./dist/scripts/afterPack.js"
+    "afterPack": "./dist/scripts/afterPack.js",
+    "afterSign": "./scripts/afterSign.js"
   },
   "author": "Thomas Nordquist",
   "email": "xxnerowingerxx@gmail.com",
@@ -82,6 +84,7 @@
     "cspell": "^4.0.28",
     "electron": "8.2.3",
     "electron-builder": "22.5.1",
+    "electron-notarize": "^0.3.0",
     "mocha": "7.1",
     "mustache": "4",
     "npm-run-all": "^4.1.5",
diff --git a/res/entitlements.mas.plist b/res/entitlements.mas.plist
index 84111d0..3dd1de0 100644
--- a/res/entitlements.mas.plist
+++ b/res/entitlements.mas.plist
@@ -8,5 +8,11 @@
     <true/>
     <key>com.apple.security.files.user-selected.read-only</key>
     <true/>
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+    <true/>
   </dict>
 </plist>
diff --git a/yarn.lock b/yarn.lock
index a340933..00446f0 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1887,6 +1887,14 @@ electron-log@4.1.1:
   resolved "https://registry.yarnpkg.com/electron-log/-/electron-log-4.1.1.tgz#c57e3d833f723742eb430dc2cdaa6f97d8dbcaff"
   integrity sha512-vkK3rNBOciRiinxrsdgg8hyUia+ct8ZMjBblvKjgNk4uHEDjjSyn313NOwv75xOMVIKlfmYzxaN8kR/oGC33aQ==
 
+electron-notarize@^0.3.0:
+  version "0.3.0"
+  resolved "https://registry.yarnpkg.com/electron-notarize/-/electron-notarize-0.3.0.tgz#b93c606306eac558b250c78ff95273ddb9fedf0a"
+  integrity sha512-tuDw8H0gcDOalNLv6RM2CwGvUXU60MPGZRDEmd0ppX+yP5XqL8Ec2DuXyz9J7WQSA3aRCfzIgH8C5CAivDYWMw==
+  dependencies:
+    debug "^4.1.1"
+    fs-extra "^8.1.0"
+
 electron-publish@22.5.1:
   version "22.5.1"
   resolved "https://registry.yarnpkg.com/electron-publish/-/electron-publish-22.5.1.tgz#04b3c90961226e687a588e743011b4b72cc6be56"