macOS processes

What is softwareupdated on Mac?

softwareupdated is the macOS Software Update daemon. It checks for and downloads macOS updates. The Software Update settings control what it does.

Process: softwareupdatedApplies to: macOS 13 Ventura and later for the System Settings path. Seen on macOS 27.2.Checked: 29 October 2026

Where you see it

softwareupdated is in the list in Activity Monitor › Network, in nettop or in Kilobat.
A firewall or network monitor asks if softwareupdated can connect.
Hotspot data goes down fast, and softwareupdated has the most bytes.

What it is

The man page calls it “the main daemon responsible for running software updates”. It is part of macOS, inside the Software Update app in CoreServices.

The softwareupdate command and System Settings > General > Software Update both use it.

Why it uses the network

Checks for updates. macOS checks for new updates in the background.
Downloads updates. With “Download new updates when available” on, it downloads macOS updates without asking.
Security responses and system files. Apple lists “Install Security Responses and system files” as a separate automatic option.

Is it normal?

Yes. Large downloads after an update comes out are usual. A macOS update can be several gigabytes.

On a hotspot, the downloads can use a large part of a data plan. Then change the settings below.

See how much it uses

Open Activity Monitor from Applications > Utilities. Click Network.
Type softwareupdated in the search field. The Sent Bytes and Rcvd Bytes columns show what it moved.
In Terminal, watch only this process. Press d to show the change per second, and q to quit.
```
nettop -p softwareupdated -P
```
See which updates macOS can install. This does not need an administrator password.
```
softwareupdate --list
```

Reduce or pause it safely

Choose Apple menu > System Settings > General > Software Update. Click the Info button next to Automatic Updates.
Turn off “Download new updates when available”. Click Done.
Install the updates later, on your usual network. Software Update still shows them.
Keep security updates current. Turn the option on again when you are back on an unmetered network.
Do not quit softwareupdated in Activity Monitor. It is part of macOS, and other features depend on it.

With Kilobat

Open the Kilobat app list and search for softwareupdated. Its row shows the live rate and the bytes it moved.
Kilobat puts this service in the System downloads group, with one line about what it does. Expand the group to see each service.
With the network filter on, click the service. The panel names the apps that the downloads were for, for example “For Music”.
Without the filter, macOS shows only the service. Then Kilobat cannot say which app a download was for.
In Terminal, see the same live list. Press / and type the name to search.
```
kilobat status --watch
```
Show its traffic over one day. Names match kilobat report --summary.
```
kilobat bandwidth softwareupdated day
```
Through MCP, an AI agent gets the same history with get_app_bandwidth and the name softwareupdated.
With Pro and the network filter, Kilobat pauses this updater on metered networks. The app keeps working. See Stop updates from using hotspot data.
```
kilobat updaters
```
The live view is free. History in the app needs Pro. Kilobat records history only while the app runs.

Questions

Does Low Data Mode stop Software Update?

Apple describes Low Data Mode only as a way to reduce data use. To be sure, turn off “Download new updates when available”.

Is it safe to turn off automatic downloads?

Yes, for a short time. You lose no updates. Install them when you are back on your usual network.

Sources

softwareupdated(8) and softwareupdate(8), man page installed with macOS 27.2
Apple Support: Software Update settings on Mac
Apple Support: Keep your Mac up to date
Apple Support: Use Apple products on enterprise networks
nettop(1), man page installed with macOS 27.2

Sources checked on 29 October 2026. Man pages are the ones installed with macOS; open one with man <name> in Terminal.