/usr/libexec/endpointsecurityd endpointsecurityd is a daemon that manages ES components. endpointsecurityd is responsible for initializing and starting ES System Extensions, as well as monitoring the health of ES clients and acting as a watchdog when necessary.