LuLu is the free, shared-source firewall for macOS. It's goal is simple; block any unknown outgoing connections, until approved by the user. While it was designed to generically detect malware by flagging unauthorized networking connections, LuLu can also be used to block OS components or 3rd-party applications from transmitting information to remote servers.

What's to like about LuLu? Lots!
100% free
As in no ads, no time trials, no missing features. Because why not!?
And no, it doesn't track, monitor, or spy on you - as that'd just be pure evil!

shared source
The full source code for LuLu is available on GitHub. Such transparency allows anybody to audit its code, or understand exactly what is going on.

protects
LuLu aims to alert you whenever an unauthorized network connection is attempted. As such, it can generically detect malware, or be used to block legitimate applications that may be transmitting private data to remote servers.

simple
"Do one thing, do it well!" LuLu is designed as simply as possible. Sure this means complex features may not be available, but it also means it's easier to use and has a smaller attack surface!

enterprise friendly
Want to know what network events are being detected? Or rules your users have added? LuLu provides simple mechanisms to subscribe to such events, and stores data such as rules in an open, easily digestible manner.

Network Monitoring
By design, LuLu only monitors for outgoing network connections. Apple's built in firewall does a great job blocking unauthorized incoming connections.

Rules
Currently, LuLu only supports rules at the 'process level', meaning a process (or application) is either allowed to connect to the network or not. As is the case with other firewalls, this also means that if a legitimate (allowed) process is abused by malicious code to perform network actions, this will be allowed.

Single User
For now, LuLu can only be installed for a single user. Future versions will likely allow it to be installed by multiple users on the same system.

Self-Defense
Legitimate attackers/security professionals know that any security tool can be trivially bypassed if specifically targeted - even if the tool employs advanced self-defense mechanisms. Such self-defense mechanisms are often complex to implement and in the end, almost always futile. As such, by design LuLu (currently) implements few self-defense mechanisms. For example, an attacker could enumerate all running processes to find the LuLu component responsible for displaying alerts and terminate it (via a sigkill).

For more than 20 years, Little Snitch has been keeping a watchful eye on your privacy, letting you know whenever an app wants to connect to the Internet. It has become the number one Network Monitor and Personal Application Firewall for the Mac. The Little Snitch Network Monitor shows you where your Mac connects to on the Internet. You decide what you want to allow or deny.

Connection Alert
Whenever an app wants to connect to the Internet, Little Snitch shows a connection alert, so you can allow or deny the connection. No data is transmitted without your consent.

Silent Mode
With Silent Mode, new connections are automatically allowed at first. So you won’t get interrupted and you can make your final decision later at your leisure.

Unhide your Mac’s secret network activity with Little Snitch Network Monitor

• Track the Trackers - Track connections from your Mac to servers worldwide.
• Dive Deep - Discover details such data volumes, server locations or ports and protocols.
• Real-Time Insight - Analyze your Mac’s network activity in real time.
• Take Control - Allow or block connections with a single click.

Versatile Hierarchies
Group connections in different hierarchical arrangements, by app, domain or country and clearly see which apps are connected to whom and where.

Analyze like a Pro
The redesigned interactive traffic chart provides fascinating insights into your Mac’s current and past network activity. Discover communication patterns and unusual data transmissions over a period of up to twelve months.

Search Smarter
Find connections by app, hostname, country, city and more using versatile search tokens.

Essentials at a glance
The Little Snitch Control Center resides in the menu bar and shows the current network activity, recently denied connections, lets you control operation modes and more.

Blocklists. Easier than ever
Choose from a curated list of blocklists, organized by topics, and activate them with just a few clicks. Daily updates ensure that your blocklists are always on spot. With support for IP-based blocklists!

Built-in DNS Encryption
Keep your browsing activity private and secure. Anyone can see which websites you visit by spying on your DNS requests. But not with Little Snitch! Little Snitch encrypts your DNS requests and uses trusted DNS services such as Quad9 to keep your browsing private and secure. Requests are encrypted using DoH, DoT, or DoQ.

The sound of connections
Get acoustic notifications for selected network connections. Listen to your Mac connecting to particular servers, even when you’re not looking at the screen. Select from a fun variety of built-in notification sounds, some of which are modulated depending on the amount of data transmitted.

You decide what your Mac is allowed to do on the network

• Decide - Decide which apps connect where and limit access to specific servers, domains, ports, or protocols.
• Organize - Subscribe to rule groups, or create Profiles, and switch between them automatically.
• Tidy Up - See when rules become invalid, or redundant as being covered by other rules, and even get suggestions for new rules.

Rule Groups
Organize your rules in groups, either locally on your Mac or subscribed from a remote server, and switch them on or off with a single click.

Find everything. Easily
List all recently used rules, or show deny rules only by using the new quick filters build-in right into the search field.

Application Groups
Create rules that apply to all macOS or Simulator processes.

The easiest network monitor and firewall for Mac. See all network connections — block any app from going online. Powerful privacy for your Mac, usable by anyone: Radio Silence lets you keep a list of apps that aren't allowed to make network connections.

• Protect your privacy
• Prevent apps from phoning home
• Save on bandwidth and data charges
• Radio Silence is completely invisible

The firewall is invisible and always active. You don't have to keep any windows open.

• No annoying pop-ups
• No clutter on your screen or dock
• No effect on your Mac's performanc

Little Snitch is a trustworthy and handy macOS application capable to monitor your network traffic and block various connections in order to protect your privacy.

Filter connections and monitor your network traffic with ease
The Little Snitch Network Monitor utility features a well-designed interface and provide easy-to-read animated and informative diagrams created based on real time traffic information. Hence, you can analyze bandwidth, connectivity status, traffic totals, detailed traffic history for the past hour and more.

You can filter the displayed data based on the process name or server port and group them according to your needs. Little Snitch helps you view traffic peaks, check the average bandwidth and save snapshots for further analysis.

Enable the Silent Mode for a distraction free working environment
The network traffic can be easily captured in the PCAP format while the network activity is displayed along various system events in order to provide a context.

There is also a Silent Mode that allows you to get on with your work without being interrupted by any network related notifications. However, you can review the Silent Mode Log to create rules for connection attempts that took place during this period.

On top of that, you can group your rules in different profiles and enable them only when a particular profile is active. Thanks to Little Snitch’s status bar menu, you can choose the desired profile with just a few mouse clicks.

Enjoy the versatility of the Automatic Profile Switching function
At the same time, you can take advantage of the Automatic Profile Switching feature and associate different networks with certain profiles. Once the network is detected, the associate profile is automatically enabled. For example, you can use a set of filters when you are at home and more restrictive ruleset when you access the web from an Internet Cafe.

What is more, Little Snitch features a flexible temporary rule system that offers a number of options for rules that are effective only for a limited period of time. Furthermore, Little Snitch automatically analyzes your ruleset and indicates the presence of overlapping, redundant or invalid rules that you might want to delete.

Cryptomator is a multi-platform transparent client-side encryption of your files in the cloud that protects your documents from an unauthorized access.

Features:

• Open source software: No backdoors - control is better than trust
• Client-side: No accounts, no registration, no data shared with any online service
• Works with Dropbox, Google Drive, OneDrive, Nextcloud and any other cloud storage service which synchronizes with a local directory
• Totally transparent: Just work on the virtual drive as if it were a USB flash drive
• AES encryption with 256-bit key length
• File names get encrypted
• Folder structure gets obfuscated
• Use as many vaults in your Dropbox as you want, each having individual passwords

• Discloses outgoing, incoming connections to your Mac
• Keeps records of the applications’ actions
• Reveals hidden services running on the computer

• Protects your Mac with Firewall
• Blocks unknown connections
• Informs about new network activities of applications

• Personalized Firewall Filter rules
• Optional Filter modes available: Silent, Alert, and Non-distractive Operation

• On-screen alerts
• On-demand scanning
• Web Shield, Mail Shield, File Shield
• Automatic virus definition updates

• Each file you hide is AES-256 encrypted.
• Keeps your data locked up and password protected.
• Hide data on an external drive for an extra layer of security.

• Create custom file groups to keep your data categorized.
• Finder tags are imported into the app to make organization simple.
• Hide and encrypt entire folders instead of selecting tons of individual files.
• Write down confidential data into an encrypted, in-app Secure Note.

• Your files will be hidden from Finder or Spotlight.
• Access recently hidden items directly from your menu bar.
• Do a full app search among all your hidden files within the app.
• Instantly lock the app or hide of all your files with global shortcut keys.

• Removes adware, such as Genieo, VSearch, and Vidx
• Removes malware, including Trojans
• Scans quickly
• Simplifies program management through a clean, lean interface

• Anti-adware
• Anti-malware
• Light footprint
• Simple interface

• Adware Scanner! Good-bye pop-up adware scams!
• Remove adware browser add-ons that hijack your navigation.
• Reset your web browsers to default settings

• Adware scanner
• High Performance Multi-threaded Virus Scanner
• Virus database automatic background updates
• 24/7 Real-time protection
• Optimized for performance
• Works silently in the background
• Supports all mail, archive, executable, and document files
• Multiple scanning options
• Exclude files/disks/folders to speed up scanning
• 1-click removal to send to quarantine or trash
• Easily schedule scans
• Drag & drop support