Little Snitch Shows Who Your Mac Talks To

A network monitor and app firewall for macOS. When any app tries to reach the internet, Little Snitch asks first. You pick Allow or Deny before data leaves your Mac.

Download Little Snitch Free

20+ Years Guarding Macs

Or install with Homebrew: brew install --cask little-snitch

Your apps open network connections all day without asking. Little Snitch on Mac makes that traffic visible and puts every decision in your hands, from a single alert to a full rule set.

Connection alerts

An app tries to go online and a prompt appears with its name, the server and the port. Nothing gets sent until you answer.

Rules you control

Limit any app to specific servers, domains, ports or protocols. Group rules, add notes and see how often each one fires.

Network Monitor map

Watch live traffic land on a world map. Sort by app, domain or country and scroll back through up to twelve months of history.

Profiles that switch

Strict rules for café Wi-Fi and relaxed ones at home. Pick a profile once per network and the switch happens on its own.

Menu bar Control Center

See current traffic, recently blocked connections and the active profile from the menu bar. Silent Mode sits one click away.

Safe by design

Rules follow an app's code signature, so renaming a file can't dodge them. DNS lookups travel encrypted over DoH, DoT or DoQ.

Advanced users can install Little Snitch with a single Homebrew command.

No Homebrew? Install it from brew.sh, or grab the signed DMG straight from Objective Development.

Download DMG

How Little Snitch works day to day

Three moments make up most of your time with the app.

A connection alert shows which app wants which server. Too many prompts on day one? Turn on Silent Mode and decide later.

Choose Allow or Deny and Little Snitch saves it as a rule. That app never asks about that server again.

Open Network Monitor to spot odd traffic. The rules window flags redundant entries and suggests new ones.

For more than 20 years this one dialog has defined littlesnitch. Try it on the right: answer a few requests the way you would on your own Mac.

Before you open the installer, run this check. An empty result means Objective Development signed the DMG and nobody touched it.

Objective Development ships three Snitch tools. Here is which one covers what.

First thing I install on every new Mac. Little Snitch caught a PDF reader calling home four times a minute. One click on Deny and it went quiet for good.

The world map in Network Monitor is weirdly addictive. I watched my Mac talk to servers in nine countries during a single coffee. Now I block most of them.

I run Little Snitch on Mac and the free littlesnitch build on my Fedora box. Same idea on both, and the Linux web UI works fine for a home server.

The first week throws a lot of alerts at you. Silent Mode fixed that for me. Once my rules settled, Little Snitch faded into the background and just works.

Profiles that switch by Wi-Fi network are the hidden gem. Strict rules at the café and relaxed ones at home. I never touch a setting.

Bought the Snitch Bundle. Micro Snitch flags my webcam light before I even notice it, and Little Snitch mac handles everything on the network side.

Tried the Linux version on an old laptop, then wanted it gone before a kernel upgrade. Removing littlesnitch on Linux took one apt command. Zero leftovers.

DNS encryption is the quiet win in version 6. I set Quad9 once and stopped thinking about who reads my lookups on hotel Wi-Fi.

The curated blocklists save me hours. Ads, trackers and malware lists turn on in a few clicks and update daily without me lifting a finger.

Straight answers on price, setup and removal.

The download costs nothing. Without a license key it runs in demo mode with the same protection as the full version.

Each demo session lasts three hours and restarts as often as you like. Network Monitor expires after 30 days, and a single license costs $59.

Version 6.5 runs on macOS 27 Golden Gate plus Tahoe, Sequoia and Sonoma. On Ventura or older, grab a matching build from the official legacy page.

Upgrade to 6.5 before you move to macOS 27. Older releases break the internet connection there.

Run brew install --cask little-snitch in Terminal. Then open the app and allow its network extension in System Settings under General, Login Items & Extensions.

Drag the app from Applications to the Trash in Finder, or pick Help, Uninstall Little Snitch from the menu. Skip Terminal and third-party cleaners here.

Only a Finder removal lets macOS delete the system extension. Your rules stay behind in case you reinstall later.

On Debian or Ubuntu run sudo apt remove littlesnitch. Fedora and Arch users swap in dnf or pacman.

Want to keep it installed but idle? Use sudo systemctl stop littlesnitch followed by sudo systemctl disable littlesnitch.

Yes, and it's free. It needs kernel 6.12 or newer with BTF, runs on eBPF and serves its interface at http://localhost:3031/.

The eBPF program and web UI are open source under GPL v2. The background daemon stays proprietary but free to use.

Little Snitch guards network traffic. Micro Snitch tells you when your camera or microphone switches on.

Both come from Objective Development, and the Snitch Bundle knocks 50% off Micro Snitch.

Run the codesign --verify command from the section above on the DMG in Downloads. An empty result means the file carries a valid Objective Development signature.

Download Little Snitch, run the full demo and see what your apps have been sending all along.

Download Little Snitch Free Read the 6.5 release notes

Size XX MB" --> v6.5 released Sep 8, 2026 / macOS 14+ / Rated 4.8 by 347 users