Every process Procession explains

This list is made from the same guide the app uses, so it is always exactly what Procession knows (220 entries). Families such as “a window of an app” cover many apps at once.

Apps

• 1Password: Your password manager. Safe to close.
• Activity Monitor: Apple’s own list of everything running. Safe to close.
• Arc: A web browser built on the same base as Chrome. Safe to close.
• Brave: A web browser built on the same base as Chrome. Safe to close.
• Claude: The Claude desktop app, with its windows and helpers. Safe to close.
• Cursor (Cursor): A code editor with AI built in. Safe to close.
• Discord: Chat, voice and video for communities and games. Safe to close.
• Docker Desktop: Runs containers in a Linux virtual machine. Close the app instead.
• Dropbox: Syncs your files with Dropbox. Safe to close.
• Figma: Design files, shared with your team. Safe to close.
• Firefox: Mozilla’s web browser. It splits tabs into separate parts. Safe to close.
• GitHub Desktop: A visual way to work with Git and GitHub. Safe to close.
• Google Chrome: Your web browser. Each tab and extension runs as its own part. Safe to close.
• Google Drive: Syncs your files with Google Drive. Safe to close.
• JetBrains IDE (idea): A code editor such as IntelliJ IDEA, PyCharm or Android Studio. Safe to close.
• Launcher: A launcher you open with a keyboard shortcut (Raycast or Alfred). Safe to close.
• Microsoft Edge: Microsoft’s web browser, built on the same base as Chrome. Safe to close.
• Microsoft Office app: One of Microsoft’s Office apps. Safe to close.
• Microsoft Teams: Work chat, meetings and calls. Safe to close.
• Notion: Notes, documents and team wikis. Safe to close.
• OneDrive: Syncs your files with Microsoft OneDrive. Safe to close.
• OrbStack: Runs containers and Linux machines. Close the app instead.
• Parallels Desktop (prl_client_app): Runs Windows or Linux in a virtual machine. Close the app instead.
• Postman: A tool for testing web APIs. Safe to close.
• Procession: This app. It watches what’s running and explains it. Safe to close.
• Safari: Apple’s web browser. Each tab runs as a separate web page process. Safe to close.
• Signal: Private messages and calls. Safe to close.
• Simulator: Runs iPhone and iPad apps on the Mac for testing. Safe to close.
• Slack: Work chat. It catches up on messages when you reopen it. Safe to close.
• Spotify: Music and podcasts. Safe to close.
• Steam (steam_osx): Valve’s game store and launcher. Safe to close.
• Telegram: Messages and calls. Safe to close.
• TextEdit: Apple’s simple text editor. Safe to close.
• Visual Studio Code: A code editor. Its extensions run as separate parts. Safe to close.
• WhatsApp: Messages and calls. Safe to close.
• Xcode: Apple’s app for building Mac and iPhone apps. Safe to close.
• Zoom (zoom.us): Video meetings. Safe to close.

Helpers inside apps

• the app crash reporter (crashpad_handler): Waits to write a report if the app crashes. Close the app instead.
• the app extension: Runs one of the app’s widgets, share options or other extensions. Leave it.
• the app graphics: Does the app’s drawing using the Mac’s graphics chip. Close the app instead.
• the app helper: Handles a shared job, such as networking, for the app. Close the app instead.
• the app plug-in: Runs a plug-in or add-on inside the app. Close the app instead.
• the app service: Does one job for the app, such as opening files or fetching data. Close the app instead.
• the app updater: Checks for or installs an update to the app. Safe to close.
• the app window: Draws one of the app’s windows or pages. Close the app instead.
• Chrome graphics (Google Chrome Helper (GPU)): Draws Chrome’s pages using your Mac’s graphics chip. Close the app instead.
• Chrome service (Google Chrome Helper): Handles networking, storage or audio for all of Chrome. Close the app instead.
• Chrome tab (Google Chrome Helper (Renderer)): One open tab, extension or web app in Chrome. Close the app instead.
• Claude Code session: A coding session running inside Claude. Close the app instead.
• Claude window: Draws one of Claude’s windows, or handles its graphics or networking. Close the app instead.
• Docker service: Part of Docker Desktop, such as its virtual machine or networking. Close the app instead.
• Firefox tab group (plugin-container): Runs a group of Firefox tabs, an extension, or its graphics. Close the app instead.
• JetBrains file watcher (fsnotifier): Tells a JetBrains editor which files changed. Close the app instead.
• Part of the app: A program that comes inside the app. Close the app instead.
• Teams web view: Shows Teams’ chats, calendar and meetings. Close the app instead.
• Xcode build tools (SourceKitService): Builds code or understands it for Xcode. Close the app instead.
• Zoom screen sharing (CptHost): Shares your screen or runs a meeting window for Zoom. Close the app instead.

In the background

• the app system extension: Adds something to macOS for the app, such as a camera or network feature. Leave it.
• Adobe background service (AdobeCRDaemon): Handles crash reports or licence checks for Adobe apps. Safe to close.
• Adobe Creative Cloud (Creative Cloud): Keeps Adobe apps signed in, updated and synced. Close the app instead.
• Developer database or server (postgres): A database or web server, usually started with Homebrew. Close the app instead.
• Figma font helper (figma_agent): Lets Figma in your browser use the fonts on your Mac. Safe to close.
• Folder watcher (watchman): Watches project folders for changes on behalf of developer tools. Safe to close.
• Google Updater: Keeps Chrome and other Google apps up to date. Safe to close.
• Jamf (jamf): Lets your organisation manage this Mac. Leave it.
• Lima controller (limactl): Looks after a Linux virtual machine started by Lima. Close the app instead.
• Linux virtual machine (com.apple.Virtualization.VirtualMachine): A Linux computer running inside your Mac. Close the app instead.
• Logi Options+ agent: Applies your Logitech mouse and keyboard settings. Safe to close.
• Logi plug-in service: Runs Logitech’s add-ons for its devices and app. Safe to close.
• Logitech camera framing: Keeps you framed on a Logitech webcam. Safe to close.
• Malwarebytes (RTProtectionDaemon): Malware protection from Malwarebytes. Leave it.
• Microsoft AutoUpdate: Keeps Microsoft apps up to date. Safe to close.
• Microsoft Defender (wdavdaemon): Antivirus from Microsoft, often installed by work. Leave it.
• Microsoft Update Assistant: Installs updates for Microsoft apps. Safe to close.
• Node.js tool (node): A JavaScript program started by another app or by Terminal. Close the app instead.
• npm tool: A JavaScript tool started with npm, often by a developer app. Close the app instead.
• Python program: A Python program started by another app or by Terminal. Close the app instead.
• Secure connection (ssh): An encrypted connection to another computer or a virtual machine. Close the app instead.
• Simulator service: Runs iPhone and iPad simulators for Xcode. Close the app instead.
• Tailscale (IPNExtension): A private network between your devices. Close the app instead.
• Teams agent: Keeps Teams ready to show notifications. Safe to close.
• Teams audio driver: Lets Teams share your Mac’s sound in meetings. Leave it.
• Terminal shell (zsh): A command line, usually in Terminal or a developer tool. Close the app instead.
• UTM virtual machine (QEMULauncher): A virtual machine running in UTM. Close the app instead.
• VMware Fusion machine (vmware-vmx): A running VMware Fusion virtual machine. Close the app instead.
• Xcode device service: Lets Xcode talk to iPhones, iPads and simulators. Leave it.
• Zoom updater (ZoomAutoUpdater): Checks for Zoom updates. Safe to close.

Part of macOS

• Accessibility (universalaccessd): Runs accessibility features such as Zoom and display settings. Leave it.
• Accessibility (VoiceOver): Runs an accessibility feature you’ve turned on. Leave it.
• Accessibility visuals (AXVisualSupportAgent): Supports visual accessibility features. Leave it.
• Activity history (biomed): Keeps a private record of activity for suggestions and Screen Time. Leave it.
• AirDrop and sharing (sharingd): Runs AirDrop, Handoff and other sharing between devices. Leave it.
• AirPods and hearing (audioaccessoryd): Handles AirPods, automatic switching and hearing features. Leave it.
• App installer (installd): Installs and removes apps and system updates. Leave it.
• App launching (coreservicesd): Knows which app opens which file, and launches apps. Leave it.
• App lifecycle (runningboardd): Decides which apps get time and memory. Leave it.
• App Store downloads (appstored): Downloads apps and updates from the App Store. Leave it.
• App Store updates (appstoreagent): Downloads App Store updates and purchases. Leave it.
• Apple Account (accountsd): Keeps you signed in to your Apple Account and other accounts. Leave it.
• Apple app service (weatherd): Keeps one of Apple’s apps or widgets up to date. Leave it.
• Apple Intelligence (intelligenceflowd): Runs Apple Intelligence features on your Mac. Leave it.
• Apple Intelligence (intelligenceplatformd): Runs Apple Intelligence features on your Mac. Leave it.
• Audio routing (audiomxd): Routes audio between apps, speakers and headphones. Leave it.
• Background downloads (nsurlsessiond): Downloads and uploads for apps in the background. Leave it.
• Background scheduler (dasd): Decides when background jobs run, to save energy. Leave it.
• Bluetooth (bluetoothd): Runs Bluetooth for keyboards, mice and headphones. Leave it.
• Calendars and contacts (calaccessd): Keeps calendars, reminders and contacts in sync. Leave it.
• Calls and FaceTime (avconferenced): Handles audio and video for FaceTime and calls. Leave it.
• Camera (cameracaptured): Runs your camera, including iPhone as a webcam. Leave it.
• Certificate checks (trustd): Checks security certificates for apps and websites. Leave it.
• Certificate checks (ocspd): Checks that security certificates haven’t been revoked. Leave it.
• Clipboard (pboard): Holds what you copy and paste. Leave it.
• Cloud files (fileproviderd): Shows cloud storage such as iCloud Drive in Finder. Leave it.
• Code signing checks (amfid): Checks that apps haven’t been tampered with. Leave it.
• Control Centre (ControlCenter): Runs Control Centre and the menu bar’s clock, Wi-Fi and battery. Leave it.
• Crash reports (ReportCrash): Writes reports when an app crashes or hangs. Leave it.
• Device management (mdmclient): Applies settings from the organisation that manages this Mac. Leave it.
• Disks (diskarbitrationd): Mounts and looks after disks and disk images. Leave it.
• Display (corebrightnessd): Manages brightness, colour and connected displays. Leave it.
• Family controls (parentalcontrolsd): Applies Screen Time limits and Family Sharing rules. Leave it.
• Feature settings (triald): Downloads settings Apple uses to tune features. Leave it.
• File change tracker (fseventsd): Notes which files change, for Time Machine, Spotlight and apps. Leave it.
• File Sharing (smbd): Shares folders with other computers on your network. Leave it.
• Find My: Keeps your Mac findable with Find My. Leave it.
• Finder (Finder): Your files, folders and desktop. Leave it.
• Firewall (socketfilterfw): Runs the macOS firewall. Leave it.
• Fonts (fontd): Manages the fonts installed on your Mac. Leave it.
• Games (gamed): Runs Game Center, Game Mode and game controllers. Leave it.
• Gatekeeper (syspolicyd): Checks that apps are from identified developers before they open. Leave it.
• Graphics compiler (MTLCompilerService): Prepares graphics code for games and apps. Leave it.
• Graphics compiler (CVMServer): Prepares graphics code for older apps and games. Leave it.
• Handoff (useractivityd): Passes what you’re doing between your Apple devices. Leave it.
• Hang reporter (spindump): Records what was happening when an app hangs. Leave it.
• Hardware driver: Runs a piece of hardware, such as Wi-Fi or a USB device. Leave it.
• iCloud Drive (bird): Syncs iCloud Drive and Desktop & Documents. Leave it.
• iCloud Photos (cloudphotod): Uploads and downloads your photos with iCloud. Leave it.
• iCloud sync (cloudd): Syncs app data with iCloud. Leave it.
• Keyboard and trackpad (hidd): Handles input from keyboards, mice and trackpads. Leave it.
• Keyboard and typing (TextInputMenuAgent): Handles keyboard layouts, spelling and input menus. Leave it.
• Keychain and security (securityd): Looks after your passwords, keys and sign-ins. Leave it.
• Language and translation (naturallanguaged): Powers translation and understanding of text. Leave it.
• Location (locationd): Works out where your Mac is for apps you’ve allowed. Leave it.
• Lockdown Mode (lockdownmoded): Applies Lockdown Mode’s extra protections. Leave it.
• Machine learning (aned): Runs machine-learning work on the Neural Engine. Leave it.
• Mail in the background (maild): Fetches and indexes mail for the Mail app. Leave it.
• Malware protection: Checks apps and files against Apple’s list of known malware. Leave it.
• Media analysis (mediaanalysisd): Finds faces, objects and text in photos and videos. Leave it.
• Menu bar items (SystemUIServer): Runs some of the menu bar’s status items. Leave it.
• Messages and FaceTime (identityservicesd): Runs Messages, FaceTime and phone calls on the Mac. Leave it.
• Music and device sync (musicd): Syncs music and backs up iPhones and iPads in Finder. Leave it.
• Nearby devices (rapportd): Lets your Apple devices find and talk to each other. Leave it.
• Network health: Watches network connections and notices problems. Leave it.
• Network names (mDNSResponder): Finds websites and devices on your network by name. Leave it.
• Network settings (configd): Applies your network settings. Leave it.
• Notification Centre (NotificationCenter): Shows notifications and widgets. Leave it.
• Notification delivery (usernoted): Delivers app notifications to you. Leave it.
• Now Playing (mediaremoted): Shows what’s playing and lets you control it. Leave it.
• Open and Save windows (com.apple.appkit.xpc.openAndSavePanelService): Shows the Open and Save windows for apps. Leave it.
• Photo analysis (photoanalysisd): Finds people, places and moments in your Photos library. Leave it.
• Photos library (photolibraryd): Manages your Photos library for Photos and other apps. Leave it.
• Picture in Picture (PIPAgent): Shows video in a floating window. Leave it.
• Power and battery (powerd): Manages sleep, battery and charging. Leave it.
• Printing (cupsd): Runs printing. Leave it.
• Privacy permissions (tccd): Remembers which apps may use your camera, files and more. Leave it.
• Private Cloud Compute (privatecloudcomputed): Sends Apple Intelligence requests to Apple’s private servers when needed. Leave it.
• Problem reports (ReportMemoryException): Writes a report after a memory or graphics problem. Leave it.
• Push notifications (apsd): Receives notifications from Apple’s servers for your apps. Leave it.
• Quick Look (QuickLookUIService): Makes previews and thumbnails of files. Leave it.
• Quick Look (quicklookd): Makes previews and thumbnails of files. Leave it.
• Remote Login: Lets people sign in to this Mac over the network with SSH. Leave it.
• Rosetta (oahd): Translates apps made for Intel Macs so they run on Apple silicon. Leave it.
• Safari helper: Supports Safari, even when Safari isn’t open. Leave it.
• Scheduled housekeeping (cron): Runs macOS’s routine maintenance jobs. Leave it.
• Screen drawing (WindowServer): Draws everything on your screen. Busy when windows move or video plays. Leave it.
• Screen recording (replayd): Records or shares your screen for apps that ask. Leave it.
• Screen Sharing (screensharingd): Lets someone you allow view or control this Mac. Leave it.
• Screen Time: Tracks app use for Screen Time. Leave it.
• Screenshots (screencaptureui): Takes screenshots and screen recordings. Leave it.
• Security tool support (endpointsecurityd): Lets security and antivirus apps watch for malware. Leave it.
• Settings store (cfprefsd): Reads and saves app and system settings. Leave it.
• Shortcuts action: Lets Shortcuts, Siri or a widget change a setting. Leave it.
• Siri: Runs Siri and the suggestions it makes. Leave it.
• Software Update (softwareupdated): Checks for and prepares macOS updates. Leave it.
• Sound (coreaudiod): Runs all sound on the Mac. Leave it.
• Speech and dictation (DictationIM): Turns speech into text, and text into speech. Leave it.
• Spotlight (mds): Runs Spotlight search and decides what to index. Leave it.
• Spotlight for apps (corespotlightd): Indexes what apps share with Spotlight, such as mail and notes. Leave it.
• Spotlight importer (mdbulkimport): Adds batches of files to Spotlight’s index. Leave it.
• Spotlight indexer (mdworker_shared): Reads new and changed files so Spotlight search can find them. Leave it.
• Spotlight knowledge: Prepares Spotlight’s suggestions and answers. Leave it.
• Spotlight search window (Spotlight): Shows the Spotlight search window. Leave it.
• Spotlight store (mds_stores): Keeps Spotlight’s search index on disk. Leave it.
• SSH keys (ssh-agent): Holds your SSH keys so you don’t retype passphrases. Leave it.
• Stage Manager (WindowManager): Runs Stage Manager and window tiling. Leave it.
• Storage clean-up (deleted): Frees space by removing caches macOS can rebuild. Leave it.
• Suggestions (suggestd): Learns your routines so macOS can make suggestions. Leave it.
• Swap manager (dynamic_pager): Makes room on disk when memory runs short. Leave it.
• System downloads (mobileassetd): Downloads extra parts of macOS, such as voices and fonts. Leave it.
• System extensions (kernelmanagerd): Loads drivers and system extensions. Leave it.
• System log (logd): Keeps the system log that apps and macOS write to. Leave it.
• System messages (distnoted): Passes messages between apps and parts of macOS. Leave it.
• System statistics (sysmond): Gathers the figures Activity Monitor shows. Leave it.
• Temperature (thermalmonitord): Watches the Mac’s temperature. Leave it.
• Text understanding (textunderstandingd): Recognises dates, addresses and more in text. Leave it.
• The core of macOS (kernel_task): Runs the Mac itself. High numbers here usually mean the Mac is hot. Leave it.
• The Dock (Dock): Draws the Dock, Launchpad, Mission Control and desktop spaces. Leave it.
• The process starter (launchd): Starts and looks after every other process on the Mac. Leave it.
• Time Machine (backupd): Backs up your Mac with Time Machine. Leave it.
• Time Machine (timemachinehelper): Backs up your Mac with Time Machine. Leave it.
• Touch Bar (TouchBarServer): Draws the Touch Bar on Macs that have one. Leave it.
• Universal Control (UniversalControl): Shares your keyboard and mouse with a nearby iPad or Mac. Leave it.
• Update reminders (SoftwareUpdateNotificationManager): Reminds you about macOS updates. Leave it.
• User accounts (opendirectoryd): Looks after user accounts and sign-in details. Leave it.
• Video decoding (VTDecoderXPCService): Decodes video for apps that play it. Leave it.
• Virtualisation: Part of macOS’s built-in virtual machine support. Leave it.
• Wallpaper: Draws your desktop picture, including moving ones. Leave it.
• Web helper (com.apple.WebKit.Networking): Handles networking or graphics for web pages. Close the app instead.
• Web page: One web page in Safari, Mail or another app that shows web content. Close the app instead.
• Wi-Fi (airportd): Runs Wi-Fi. Leave it.
• Your login session (loginwindow): Keeps your login session running. Leave it.