Little Snitch

Little Snitch is a network monitor and application firewall for macOS that alerts you to every attempt to connect to the Internet, allowing the user to decide whether to allow or block data transmission to protect their privacy.

★★★★★

5.0(1 ratings)

• Connection Alert. Displays a notification whenever an application attempts to establish an outgoing connection to the Internet. The pop-up window details the application, destination, and port, offering options to allow or deny the connection temporarily or by creating a permanent rule. This is the core function that prevents data transmission without the user's knowledge.
• Real-time Network Monitor. Provides a comprehensive, up-to-date view of all system network activity. It shows active connections, data transfer volumes, geographical locations of servers, and used protocols in an interactive graph. This analysis helps identify unusual communication patterns or unauthorized traffic.
• Rules and Rule Groups. Allows the creation of custom rules to automatically manage connections based on application, domain, port, or protocol. Rules can be organized into local groups or you can subscribe to remote lists, enabling or disabling them collectively. The system also identifies redundant or obsolete rules to keep the configuration tidy.
• Silent Mode. When activated, new connections are temporarily and automatically permitted without showing alerts. Decisions are postponed for the user to review later in the Network Monitor. This mode is useful to avoid interruptions during presentations, games, or periods of focused work.
• Menu Bar Control Center. Provides quick access to main functions directly from the macOS menu bar. It shows a list of recent activity, blocked connections, a real-time traffic graph, and controls to switch between operating modes or active profiles. It offers an instant overview without opening the main window.
• Block Lists. Includes a system to subscribe to curated block lists updated daily, organized by topics such as trackers, malware, or ads. These lists, which also support IP-based blocks, can be activated with a few clicks to automatically block connections to domains known for unwanted activities.
• Integrated DNS Encryption. Protects DNS queries by encrypting them via DoH, DoT, or DoQ protocols and routing them through trusted DNS services like Quad9. This feature prevents network observers from spying on which websites the user is trying to visit, adding a layer of privacy to browsing.
• Acoustic Notifications. Offers the possibility to assign notification sounds to specific network connections. The built-in sounds can be modulated based on the volume of data transmitted. This feature allows selected network activity to be perceived audibly, even when attention is not on the screen.
• Cryptographic Process Identification. Identifies applications by their cryptographic code signature, not by their location on the disk. This method ensures that rules continue to apply correctly even if the application is moved or renamed, increasing the robustness and security of the filtering policy.
• Automatic Profile Switching. Allows creating different profiles with specific rule sets and associating them with particular Wi-Fi networks. The software automatically switches to the corresponding profile when the Mac connects to one of those networks. This adapts protection to the context, for example, applying more restrictive rules on public networks.
• Command Line Utility. Includes a terminal tool that allows controlling settings, exporting rules, responding to alerts, or logging events directly from the command line. This functionality facilitates task automation, remote management, and integration into advanced workflows for system administrators.
• Bidirectional Rules. Ability to create rules that control both outgoing connections initiated by local applications and incoming connections from the outside. This extends the firewall's scope beyond outbound monitoring, allowing you to manage which services on your Mac can be reached from the Internet.

Little Snitch is developed by the Austrian company Objective Development GmbH. Its development began in the year 2000 and the first public version was released in 2003. The program is mainly written in the Objective-C programming language, with parts of its more recent code possibly using Swift, and is specifically designed for the macOS operating system and its security architecture.

Alternatives to Little Snitch:

WinSlap

WinSlap is a software utility designed to apply configuration changes to a Windows operating system after a clean installation.

Price: Free   Size: 0.911 MB   Version: 1.8   OS: Windows