Alerts you about outgoing network connections for your Mac

Little Snitch for Mac

Little Snitch for Mac

  -  35.01 MB  -  Trial
A firewall protects your computer against unwanted guests from the Internet. But who protects your private data from being sent out? Little Snitch does!

Little Snitch informs you whenever a program attempts to establish an outgoing Internet connection. You can then choose to allow or deny this connection, or define a rule how to handle similar, future connection attempts.

This reliably prevents private data from being sent out without your knowledge. Little Snitch for Mac runs inconspicuously in the background and it can also detect network related activity of viruses, trojans and other malware.

Features and Highlights

Silent Mode – Decide Later
There are times where you don’t want to get interrupted by any network related notifications. With Silent Mode you can quickly choose to silence all connection warnings for a while. You can then later review the Silent Mode Log to define permanent rules for connection attempts that occurred during that time.

Research Assistant
Have you ever wondered why a process you’ve never heard of before suddenly wants to connect to some server on the Internet? The Research Assistant helps you to find the answer. It only takes one click on the research button to anonymously request additional information for the current connection from the Research Assistant Database.

Automatic Profile Switching
Rules can be arranged in different profiles like “Home”, “Office” or “Mobile Internet”. This allows you to use different sets of filter rules depending on the network you are currently connected to. Profiles can be activated either manually from the status menu, or automatically, whenever you join a network that’s associated with one of your profiles.

Firewall for incoming connections
Little Snitch for macOS not only reveals any outgoing network connection attempt to make sure that sensitive data doesn’t leave your computer without your consent. The inbound firewall in LittleSnitch provides you with the same level of control for incoming connections.

How to Use

Open the app and allow necessary system permissions

Configure rules for apps accessing the internet

Use the Network Monitor to view real-time connections

Create custom profiles for different network scenarios

Allow or deny connections with one-click decisions

Review past connections via the connection history

Enable Silent Mode to auto-collect rules quietly

Set up notifications for suspicious network activity

Export and import rules for backup or sharing

System Requirements
  • macOS 11 Big Sur or later
  • 64-bit Intel or Apple Silicon (M1/M2/M3)
  • At least 200 MB of free disk space
  • Internet connection for initial activation
  • Administrator privileges for installation
PROS
  • Real-time network traffic monitoring
  • Fine-grained control over app connections
  • Silent Mode for background rule creation
  • Sleek and intuitive user interface
  • Lightweight and low resource usage
CONS
  • Can be overwhelming for beginners
  • Requires frequent user decisions
  • Some apps may not work without rules
  • Paid license required after trial
  • Limited support for automation tasks
Note: Requires 64-bit processor. The demo runs for three hours, and it can be restarted as often as you like. The Network Monitor expires after 30 days.

Why is this app published on FileHorse? (More info)
  • Little Snitch 6.3 Screenshots

    The images below have been resized. Click on them to view the screenshots in full size.

    Little Snitch 6.3 Screenshot 1
  • Little Snitch 6.3 Screenshot 2
  • Little Snitch 6.3 Screenshot 3
  • Little Snitch 6.3 Screenshot 4
  • Little Snitch 6.3 Screenshot 5

What's new in this version:

New Features and Improvements:
General:
- Added support for macOS 26 Tahoe
- Added Internet Access Policy support for Safari web apps added to the Dock
- Improved loading of blocklist to treat semicolon-prefixed text as comments, preventing false positives
- Improved display of app bundle paths in the inspector of Network Monitor and in the rules window
- Connections made by an app on behalf of Password AutoFill (typically to fetch website icons) are now attributed to the Password AutoFill helper process instead of the app itself
- Connections from XPC helper processes used by app extensions are now attributed to their corresponding extension
- Improved parent process detection for apps running a copy of themselves from a temporary folder

Configuration:
- Added quick filters to the search field for showing only active or inactive rules in the rule list
- Added action menus for some fields in the rule inspector (for example to change the process owner setting of a rule)
- Improved the header section of the rule list to better describe the current contents of the list (the number of rules currently shown, the kind of filter currently applied, etc.)

Status Menu and Connection Alert:
- Improved appearance of headings in the status menu
- Selecting an app from the “Recent Network Activity” list in the status menu now focusses on connections of only that app in Network Monitor
- When a process declares a custom process name at runtime that differs from the actual name on disk, that custom name is now also shown in the details section of the connection alert

Network Monitor:
- Improved responsiveness when allowing or denying connections from the connection list
- Reduced energy consumption by disabling animations while the window is not visible (either hidden or covered by other windows)
- Sorting the connection list by name now shows app groups (like “macOS”) always at the top
- Added a “Focus on” context menu option in Network Monitor to focus the list on connections for a particular app, process, domain, or country
- The inspector now shows a warning triangle next to the Code ID of a process if that ID no longer matches the ID of the corresponding executable on disk. This can happen typically when the developer has changed the bundle identifier of their app with an update

Fixed:
General:
- Fixed incorrect parsing of small IPv6 address blocks in blocklists (e.g. /128 was incorrectly imported as /12)

Network Monitor:
- Showing correct icons and localized names for iOS/iPadOS apps running natively on macOS
- Fixed incorrect geographic attribution of Private Relay connections to Åland

Configuration:
- Display the Welcome window and setup questions correctly after reinstalling, even if a previous installation was incomplete
- Fixed a crash caused by rule usage counts exceeding 4 billion
- Fixed the “Networks” sidebar not updating after changing profile details
- Fixed the “Automatic Profile Switching” pane not updating after changing profile details
- Fixed search scope changes not applying while focusing on a set of rules
- Fixed the highlight color of the Notes field in the inspector updating incorrectly when switching system appearance between dark and light