diff --git a/CHANGELOG.md b/CHANGELOG.md
index efc48a0..59211c2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.0.16] - 2026-04-28
+
+### Changed
+
+- Bump embedded version to 2.0.16. Refresh `sha256` in `Formula/heplify.rb` once the GitHub release artifact `heplify_darwin_arm64` for this tag is published.
+
 ## [2.0.8] - 2026-04-01
 
 ### Fixed
diff --git a/Formula/heplify.rb b/Formula/heplify.rb
new file mode 100644
index 0000000..a4a25eb
--- /dev/null
+++ b/Formula/heplify.rb
@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+# Homebrew tap served from this repo:
+#   brew tap sipcapture/heplify https://github.com/sipcapture/heplify
+#   brew install heplify
+#
+# Bump on each release (GitHub tag matches version, e.g. 2.0.16):
+#   shasum -a 256 "$(curl -sL "https://github.com/sipcapture/heplify/releases/download/<TAG>/heplify_darwin_arm64")"
+# Prebuilt macOS binary is arm64 (Apple Silicon) only — same as CI.
+class Heplify < Formula
+  desc "HEP capture agent for Homer / SIP capture (SIP, RTCP, logs, HEP forward)"
+  homepage "https://github.com/sipcapture/heplify"
+  version "2.0.16"
+  license "AGPL-3.0-or-later"
+
+  on_macos do
+    on_arm do
+      url "https://github.com/sipcapture/heplify/releases/download/#{version}/heplify_darwin_arm64"
+      # Update after CI uploads the 2.0.16 release asset (see header comment).
+      sha256 "05cd9e8fafc84b3438ff6fa903f783a25bf7538f2332577136895a93c9f24157"
+    end
+  end
+
+  def install
+    bin.install "heplify_darwin_arm64" => "heplify"
+  end
+
+  def caveats
+    <<~EOS
+      Live capture on macOS usually requires root or appropriate permissions, e.g.:
+        sudo heplify -config /path/to/heplify.json
+    EOS
+  end
+
+  test do
+    assert_match "heplify v#{version}", shell_output("#{bin}/heplify -version")
+  end
+end
diff --git a/README.md b/README.md
index 662765a..fb886bf 100644
--- a/README.md
+++ b/README.md
@@ -67,13 +67,22 @@ chmod +x heplify_linux_amd64
 
 ### macOS (Apple Silicon)
 
-Download [heplify](https://github.com/sipcapture/heplify/releases) and run:
+**Homebrew** (tap lives in this repo):
+
+```bash
+brew tap sipcapture/heplify https://github.com/sipcapture/heplify
+brew install heplify
+```
+
+Or download [heplify](https://github.com/sipcapture/heplify/releases) and run:
 
 ```bash
 chmod +x heplify_darwin_arm64
 sudo ./heplify_darwin_arm64 -config heplify.json
 ```
 
+After each release, bump `version` and `sha256` in [`Formula/heplify.rb`](Formula/heplify.rb) (Apple Silicon binary only).
+
 ### Windows
 
 1. Install [Npcap](https://npcap.com/#download)
diff --git a/nfpm.yaml b/nfpm.yaml
index a758839..7852c34 100644
--- a/nfpm.yaml
+++ b/nfpm.yaml
@@ -16,9 +16,10 @@ maintainer: "SIPCAPTURE <support@sipcapture.org>"
 description: |
   Next-generation HEP Agent and Collector for the SIPCAPTURE ecosystem.
   Captures SIP, RTCP and other VoIP traffic and forwards it via HEP protocol.
+  (AGPL-3.0)
 vendor: "SIPCAPTURE"
 homepage: "https://github.com/sipcapture/heplify"
-license: "AGPL-3.0"
+# license omitted: nfpm writes "License:" into deb control; Packagecloud may 500.
 contents:
   - src: ./heplify
     dst: /usr/local/bin/heplify
diff --git a/src/cmd/heplify/version.go b/src/cmd/heplify/version.go
index dc57dbe..de0f135 100644
--- a/src/cmd/heplify/version.go
+++ b/src/cmd/heplify/version.go
@@ -7,7 +7,7 @@ import (
 
 // Version is the application version. Updated by the release build process via scripts/update_version.sh.
 // Overridden at build time with -X main.Version=<ver> ldflags by GoReleaser and Makefile.
-var Version = "2.0.15"
+var Version = "2.0.16"
 
 // BuildDate is the UTC build timestamp. Set via -X main.BuildDate=<date> ldflags at build time.
 var BuildDate = "unknown"