---
title: "Custom Branding - Santa Docs"
description: "Custom Branding - Open source binary authorization for macOS. Configure, deploy, and extend the agent that powers Workshop."
doc_version: "1"
last_updated: "2026-09-02"
canonical: "https://northpole.security/docs/santa/configuration/branding"
---
# Custom Branding

Santa can display your organization’s name or logo on every window it shows, so that users can tell who manages the machine and who to contact. Branding is configured with three keys, all documented on the [Configuration: Keys](https://northpole.security/docs/santa/configuration/keys) page: `BrandingCompanyName`, `BrandingCompanyLogo`, and `BrandingCompanyLogoDark`.

All three were added in Santa 2026.1.

When any of them is set, Santa adds a “Managed by:” footer to the bottom of all notification dialogs (e.g. execution blocked, file access blocked, network flow blocked).

## Company name

`BrandingCompanyName` is the simplest option: the name is shown as text.

```
<key>BrandingCompanyName</key>
<string>Acme Corporation</string>
```

![Block dialog branded with a company name](https://northpole.security/img/branding-name-dialog_dark.png#dark) ![Block dialog branded with a company name](https://northpole.security/img/branding-name-dialog_light.png#light)

## Company logo

`BrandingCompanyLogo` replaces the name with an image. The image is scaled down to fit within 84x28 points, so a wide wordmark works better than a tall or square logo. Supply the artwork at twice that size so that it stays sharp on a Retina display.

Only the `file://` and `data:` URL schemes are supported. HTTP and HTTPS URLs are not, as Santa will not fetch a logo over the network:

```
<key>BrandingCompanyLogo</key>
<string>file:///Library/Application%20Support/Acme/logo.png</string>
```

If you use a `file://` URL, deploy the image alongside the profile and put it somewhere that is readable by all users. Otherwise, embed the image directly in the profile with a `data:` URL:

```
<key>BrandingCompanyLogo</key>
<string>data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAKgAAAA4CAYAAAC...</string>
```

### Dark mode

Santa’s windows follow the user’s appearance setting, so a single-color logo that reads well on a light background can disappear on a dark one. `BrandingCompanyLogoDark` is used instead of `BrandingCompanyLogo` whenever the window is drawn in dark mode:

```
<key>BrandingCompanyLogo</key>
<string>file:///Library/Application%20Support/Acme/logo.png</string>
<key>BrandingCompanyLogoDark</key>
<string>file:///Library/Application%20Support/Acme/logo-dark.png</string>
```

The example below uses a dark wordmark for light windows and a light one for dark windows.

**Light appearance**

![Block dialog in light mode branded with a dark company logo](https://northpole.security/img/branding-logo-dialog_light.png)

**Dark appearance**

![Block dialog in dark mode branded with a light company logo](https://northpole.security/img/branding-logo-dialog_dark.png)

## Precedence

Only one piece of branding is ever displayed. The keys are evaluated in this order:

Order

Key

Used when

1

`BrandingCompanyLogoDark`

The window is in dark mode and the key is set

2

`BrandingCompanyLogo`

The key is set

3

`BrandingCompanyName`

Neither logo key applies

A logo URL that uses any other scheme is ignored, as if the key was not set at all. If a logo URL is accepted but the image cannot be loaded - for example the file is missing, or is not an image format that macOS can read - Santa falls back to `BrandingCompanyName`. Set that key alongside the logo keys so that there is always something to display.

## Terminal messages

Blocks that happen in a terminal are also branded, but only ever with `BrandingCompanyName`, as logos cannot be drawn on a TTY:

```
Santa

The following application has been blocked from executing
because its trustworthiness cannot be determined

Reason:      No matching rule
Path:        /Applications/Malware.app/Contents/MacOS/Malware
Identifier:  60055b1f6fb276bfacf61f91505a72201987f20ad8b6867cce3058f4c0f0f5e5
Parent:      bash (2511)

Managed by: Acme Corporation
```

## Custom messages

Branding covers who manages the machine. To change what the dialogs *say*, see the `UnknownBlockMessage`, `BannedBlockMessage`, `FileAccessBlockMessage`, `BannedUSBBlockMessage`, `EventDetailURL`, and `EventDetailText` keys on the [Configuration: Keys](https://northpole.security/docs/santa/configuration/keys) page. Rules synced from a server can also carry their own message and URL, which override the configured defaults.

## Sitemap

- [Home](https://northpole.security/index.md)
- [Workshop](https://northpole.security/workshop.md)
- [Santa](https://northpole.security/santa.md)
- [Features](https://northpole.security/features.md)
- [Cookbook](https://northpole.security/cookbook.md)
- [Docs](https://northpole.security/docs.md)
- [Blog](https://northpole.security/blog.md)
- [Glossary](https://northpole.security/glossary.md)
- [About](https://northpole.security/about.md)
- [Contact](https://northpole.security/contact.md)