AltCatalog

Alternatives to LuLu

Free open source Mac firewall

Alt Score

Alt Score · 65

How this alternative ranks. How it works →

Verified coverage 90%61
Visibility 10%100

Verified coverage = sourced yes and partial answers in the category checklist. Visibility = relative app-page views on AltCatalog over 30 days, neutral below 500 category views. Payment, votes, and vendor opinions are never score inputs.

#3 of 7 in Firewall software

LuLu ranks #3 of 7 in Firewall software, with an Alt Score of 65. It is licensed under GNU General Public License v3.0, donationware from Free and available on macOS. 9 of 9 checklist rows are verified against a public source.

Most compared with pfSenseNetGuardLittle Snitch
Official site Suggest an edit Data history Work on LuLu? Claim this page
Who it's for

Privacy-conscious macOS users and security-minded admins who want visibility into which applications are phoning home, including protection against malware command-and-control traffic and unwanted data exfiltration.

What you get

A free, open-source firewall that alerts on and blocks unknown outgoing network connections. You can approve or deny connections as they happen, build rules by program or remote endpoint (with wildcard/regex support), import or export rule sets, and run in standard (alerting), passive (silent), or block-all modes. It also supports allow/block lists from local or remote sources, VirusTotal lookups, code-signing checks, and a built-in network monitor (Netiquette).

How it works

LuLu runs as a macOS System Extension using the Network Extension framework (not a kernel extension) to intercept outgoing connections in real time, then permits or denies each one based on user-defined or automatically generated rules.

Where LuLu stands out

Verified capabilities most alternatives don't have.

Profiles (home, public) only 3 of 7 apps

See the full checklist

Why people leave LuLu

Dashed reasons are sourced facts; the rest are opinions. Vendors can dispute.

Sign in to add a reason — new reasons go through moderation before appearing.

Ranked alternatives

Ordered by Alt Score. Click any score to see the breakdown.

Sponsored Paid slot. Never affects the ranked order below. Promote here →
01

The open source router/firewall OS.

Apache-2.0 Web
Alt Score

Alt Score · 75

How this alternative ranks. How it works →

Verified coverage 90%72
Visibility 10%100

Verified coverage = sourced yes and partial answers in the category checklist. Visibility = relative app-page views on AltCatalog over 30 days, neutral below 500 category views. Payment, votes, and vendor opinions are never score inputs.

02

No-root Android firewall.

GPL-3.0-only Android
Alt Score

Alt Score · 70

How this alternative ranks. How it works →

Verified coverage 90%67
Visibility 10%100

Verified coverage = sourced yes and partial answers in the category checklist. Visibility = relative app-page views on AltCatalog over 30 days, neutral below 500 category views. Payment, votes, and vendor opinions are never score inputs.

03

The Mac outbound-connection guardian.

Proprietary macOS
Alt Score

Alt Score · 60

How this alternative ranks. How it works →

Verified coverage 90%56
Visibility 10%100

Verified coverage = sourced yes and partial answers in the category checklist. Visibility = relative app-page views on AltCatalog over 30 days, neutral below 500 category views. Payment, votes, and vendor opinions are never score inputs.

04

Visual network monitoring firewall.

Proprietary WindowsAndroid
Alt Score

Alt Score · 55

How this alternative ranks. How it works →

Verified coverage 90%50
Visibility 10%100

Verified coverage = sourced yes and partial answers in the category checklist. Visibility = relative app-page views on AltCatalog over 30 days, neutral below 500 category views. Payment, votes, and vendor opinions are never score inputs.

05

The friendlier pfSense fork.

BSD-2-Clause Web
Alt Score

Alt Score · 55

How this alternative ranks. How it works →

Verified coverage 90%50
Visibility 10%100

Verified coverage = sourced yes and partial answers in the category checklist. Visibility = relative app-page views on AltCatalog over 30 days, neutral below 500 category views. Payment, votes, and vendor opinions are never score inputs.

06

Open source app firewall with DNS filtering.

GNU General Public License v3.0 WindowsLinux
Alt Score

Alt Score · 55

How this alternative ranks. How it works →

Verified coverage 90%50
Visibility 10%100

Verified coverage = sourced yes and partial answers in the category checklist. Visibility = relative app-page views on AltCatalog over 30 days, neutral below 500 category views. Payment, votes, and vendor opinions are never score inputs.

Feature comparison

Rows come from the Firewall software checklist (13 rows). Human-verified cells only. ? means the value has not been verified.

Comparing LuLu pfSense × NetGuard × Little Snitch × GlassWire × OPNsense ×
+ Add app
Portmaster
Firewall software checklist LuLupfSenseNetGuardLittle SnitchGlassWireOPNsense
Pricing model
Starts at
License
Platforms
Outbound connection alerts
Per-app rules
Network-wide (router / gateway)
Profiles (home, public)
Open source
One-time purchase option
Traffic monitoring UI
IDS/IPS
Low overhead
verified pending unknown (?) Click any cell to view its source or propose a value
Sources & verification 14

Every fact and feature listed for LuLu is verified against its own pages. Each alternative is sourced on its own page.

FAQ

Yes. NetGuard, GlassWire and Portmaster have a free tier or are fully free. Free-tier limits in the comparison table are verified and dated.

pfSense, NetGuard and OPNsense — every license claim links its source.