Alternatives to Little Snitch
The Mac outbound-connection guardian
Little Snitch ranks #4 of 7 in Firewall software, with an Alt Score of 60. It is proprietary, sold as a one-time purchase from €59 and available on macOS. 8 of 9 checklist rows are verified against a public source.
Mac users who want to know what their apps are doing on the network and want the ability to block connections without their consent — privacy-conscious individuals, developers auditing app behavior, and admins hardening a Mac against unwanted data exfiltration.
An application firewall that alerts you the moment any app tries to make an outgoing internet connection, letting you allow or deny it and save the decision as a rule. A Network Monitor view shows live and historical traffic broken down by app, domain, and country, including data volumes, ports, and protocols. You can import curated blocklists to block known trackers or ad servers in a few clicks, and switch between rule profiles for different contexts (e.g., trusted network vs. public Wi-Fi). It also includes built-in encrypted DNS (DoH/DoT/DoQ) and a command-line tool for scripting rule management.
Little Snitch installs a low-level network filter that intercepts outgoing connection attempts before they leave the Mac, cryptographically identifies the requesting process, and checks it against user-defined or profile-based rules to silently allow, silently deny, or prompt the user with an alert.
Where Little Snitch stands out
Verified capabilities most alternatives don't have.
Why people leave Little Snitch
Dashed reasons are sourced facts; the rest are opinions. Vendors can dispute.
Sign in to add a reason — new reasons go through moderation before appearing.
Ranked alternatives
Ordered by Alt Score. Click any score to see the breakdown.
Feature comparison
Rows come from the Firewall software checklist (13 rows). Human-verified cells only. ? means the value has not been verified.
| Firewall software checklist | Little Snitch | pfSense | NetGuard | LuLu | GlassWire | OPNsense |
|---|---|---|---|---|---|---|
| Pricing model | ||||||
| Starts at | ||||||
| License | ||||||
| Platforms | ||||||
| Outbound connection alerts | ||||||
| Per-app rules | ||||||
| Network-wide (router / gateway) | ||||||
| Profiles (home, public) | ||||||
| Open source | ||||||
| One-time purchase option | ||||||
| Traffic monitoring UI | ||||||
| IDS/IPS | ||||||
| Low overhead |
Every fact and feature listed for Little Snitch is verified against its own pages. Each alternative is sourced on its own page.
-
Platforms macOS verified 2026-07-09
macOS Tahoe … Also compatible with macOS Sequoia and Sonoma
https://obdev.at/products/littlesnitch/download.html -
License Proprietary verified 2026-07-09
Commercial proprietary software by Objective Development; no open-source license.
Single License … 59 €
https://obdev.at/products/littlesnitch/order.html -
Pricing model One-time verified 2026-07-09
Perpetual license, paid upgrades for new major versions
https://obdev.at/products/littlesnitch/compare.html -
Starts at €59 verified 2026-07-09
Single License … 59 €
https://obdev.at/products/littlesnitch/order.html -
Status active verified 2026-07-09
Little Snitch 6.4.1
https://obdev.at/products/littlesnitch/download.html -
Outbound connection alerts Yes verified 2026-07-09
Whenever an app wants to connect to the Internet, Little Snitch shows a connection alert, so you can allow or deny the connection.
https://obdev.at/products/littlesnitch/index.html -
Per-app rules Yes verified 2026-07-09
Description — Name of the connecting process and remote server … Answering the alert creates a rule which matches the connection.
https://help.obdev.at/littlesnitch6/alert-overview -
Network-wide (router / gateway) No verified 2026-07-09
Per-device macOS application firewall; no router/gateway mode.
It has become the number one Network Monitor and Personal Application Firewall for the Mac.
https://obdev.at/products/littlesnitch/index.html -
Profiles (home, public) Yes verified 2026-07-09
With Profiles, you can easily master all these situations, especially with automatic profile switching … The next time you join a network not yet associated with a profile, Little Snitch asks what to
https://help.obdev.at/littlesnitch6/concepts-profiles -
Open source No verified 2026-07-09
Sold commercially under a proprietary license.
Single License … 59 €
https://obdev.at/products/littlesnitch/order.html -
One-time purchase option Yes verified 2026-07-09
Perpetual license, paid upgrades for new major versions
https://obdev.at/products/littlesnitch/compare.html -
Traffic monitoring UI Yes verified 2026-07-09
Unhide your Mac's secret network activity with Little Snitch Network Monitor … Analyze your Mac's network activity in real time.
https://obdev.at/products/littlesnitch/index.html -
IDS/IPS No verified 2026-07-09
Application firewall, not an IDS/IPS.
It has become the number one Network Monitor and Personal Application Firewall for the Mac.
https://obdev.at/products/littlesnitch/index.html
FAQ
Yes. NetGuard, GlassWire and Portmaster have a free tier or are fully free. Free-tier limits in the comparison table are verified and dated.
pfSense, NetGuard and LuLu — every license claim links its source.