Little Snitch

A firewall protects your computer against unwanted guests from the Internet. But who protects your private data from being sent out? Little Snitch does!

Protect your privacy

As soon as you’re connected to the Internet, applications can potentially send whatever information they want to wherever they want.

Sometimes they do this for good reason, on your explicit request. But often they don’t. Little Snitch allows you to intercept these unwanted connection attempts, and lets you decide how to proceed.

Network Monitoring Redefined

Take a look under the hood to see at a glance who talks to whom. The Little Snitch Network Monitor, which has been redesigned from ground up, raises the bar of network traffic monitoring to a new level.

With beautiful animations and informative diagrams it provides fine grained real time traffic information, powerful yet simple options for analyzing bandwidth, traffic totals, connectivity status and more.

Highly detailed traffic history of the last hour, separate for each process, server, port and protocol.
Filtering by process name, server, port, etc.
Versatile grouping and sorting options.
Zooming from one hour down to one minute time range.
Display of total traffic amounts, peak traffic, average bandwidth, etc.
Save Snapshots for later analysis.
Capture network traffic in PCAP format.
Indication of connections denied by Little Snitch.
“Show Corresponding Rule” to quickly figure out why a particular connection was allowed or denied.
Display of system events (app launch or termination, sleep) to see network activity in its related context.

Silent Mode – Decide Later

There are times where you don’t want to get interrupted by any network related notifications. With Silent Mode you can quickly choose to silence all connection warnings for a while. You can then later review the Silent Mode Log to define permanent rules for connection attempts that occurred during that time.

Profiles

With Little Snitch 3, rules can optionally be arranged in separate profiles like “Home”, “Office” or “Internet Cafe”. Rules that are assigned to a particular profile are only effective if that profile is active. The active profile can be chosen conveniently from the status menu.

This allows you to quickly switch between different sets of rules depending if you are at home, at the office or connected to a public network.

Automatic Profile Switching New

Automatic Profile Switching allows you to associate different networks with certain profiles in Little Snitch. Whenever you join one of these networks, Little Snitch detects the network change and switches to the associated profile automatically.

This allows you to automatically apply different sets of filter rules depending on the network you are currently connected to. You can for example use a rather restrictive ruleset in an Internet Cafe, and a more permissive set of rules at home or when connected to a VPN.

Firewall for incoming connections

Little Snitch was always great at showing when data was sent out from your computer. It reveals any outgoing network connection attempt to make sure that sensitive data doesn’t leave your computer without your consent.

With the new inbound firewall in Little Snitch 3 you now get the same level of control for incoming connections as well.

Simplified Connection Alert

Afraid of technical terms like “TCP connection” or “http port”? No problem. The new Detail Level preference option allows non-expert users to get just the right amount of information to make their decisions. And it only takes a single click at the Show Details button to reveal the full information and all available options.

Research Assistant

Have you ever wondered why a process you’ve never heard of before suddenly wants to connect to some server on the Internet? The Research Assistant helps you to find the answer. It only takes one click on the research button to anonymously request additional information for the current connection from the Research Assistant Database.

And so much more…

Versatile temporary rule options

A number of additional rule lifetime options allow you to create rules that are effective only for a limited time.

Domain based rules via Connection Alert

It’s now possible to create rules that are effective for an entire domain right from within the Connection Alert.

Rules matching multiple destinations

Rules can now be set up to match a list of hostnames, domains or arbitrary IP address ranges in from-to notation. This helps to keep the ruleset smaller and easier to maintain.

Rule Suggestions

Not sure which rules best suit your needs? Little Snitch 3 can offer rule suggestions based on your previous network usage (expired temporary rules, Silent Mode connections, etc.). A number of grouping options (by process, by domain, etc.) allow you to specify how fine grained these suggestions should be. You can then conveniently turn them into permanent rules.

Ruleset Analyzer

Little Snitch 3 automatically analyzes your ruleset and points out redundant, overlapping or invalid rules which you may wish to delete.

Redesigned configuration interface

The new sidebar design gives you quick access to frequently visited areas such as recently added rules, temporary rules, suggestions, profiles and more.

Improved status menu

Quickly switch between profiles, turn on Silent Mode, access your rules and other settings, and see a summary of current network activity.

System Process Rules

Rules are now based on process owner instead of rule owner, which makes it easier to define rules for system level processes such as web servers and other background services. These system process rules are effective in all user accounts.

Ask Rules

This new type of rules makes it possible to get asked for particular connection attempts while all other connections are still allowed or denied automatically.

Sort Rules by Precedence

Rules can now be sorted by precedence, which makes it easier to learn how they relate to each other.