# Little Snitch Published January 1, 2026 · Updated August 10, 2026 Host-based application firewall Category: Security & Privacy · Paid · [Official website](https://www.obdev.at/products/littlesnitch/index.html) ## Install with Homebrew `brew install --cask little-snitch` ## Quick take Buy Little Snitch 6 if you need professional outbound visibility on macOS in August 2026: Tahoe support, hourly blocklists, biometric unlocks, and continuous integrity checks still beat free tools for serious privacy work. Pick LuLu when the ~€59 Single licence is the deal-breaker. Best for: Privacy-conscious professionals, Security researchers and analysts, Developers debugging network behaviour ## What is Little Snitch? Little Snitch is a host-based application firewall and network monitor for macOS, made by Objective Development in Austria. It first shipped in 2002 and still focuses on outbound connections: what your apps try to send from the Mac to the internet, not the inbound traffic that the built-in macOS Firewall already covers. As of August 2026, Little Snitch 6.4.1 (build 7212, released 22 June 2026 as a hot fix after 6.4 on 21 June) is the current release. Version 6.3 (September 2025) added macOS 26 Tahoe support; 6.4 refined Tahoe menus, hourly blocklist updates, continuous app-bundle integrity monitoring, temporary unlock-until-quit for locked configurations, Touch ID for locked Control Center settings, biometric software-update authentication, and DNS4EU after the dns0.eu shutdown (Quad9 presets moved to unfiltered endpoints). It runs as a Universal Binary for Intel and Apple Silicon, requires macOS Sonoma 14.0 or later (including Sequoia and Tahoe 26), and installs as a system extension that intercepts each outgoing connection attempt with an alert naming the app, destination, and protocol. That lets you block telemetry, analytics, and other cloud chatter many apps start without asking. DNS encryption, curated blocklists, and an interactive Network Monitor with traffic visualisation keep it useful for journalists, security researchers, privacy advocates, and anyone who wants network activity to stay visible and under their control. Little Snitch Mini on the Mac App Store is the simpler sibling; the full Objective Development build adds the map, DNS encryption, blocklists, profiles, and advanced rule management. A Single licence is about €59 / ~$59-$65 (gift-card Single listed at 59 €; Little Snitch + Micro Snitch bundle at 63.49 €), with Family and Multi packs available, a full 30-day trial, and licences valid for both v5 and v6. ## Features - **Connection Alerts & Rule Management.** Whenever an app opens an outgoing connection, Little Snitch shows an alert with the app name, destination server, port, and protocol. You can allow or deny once, until quit, or permanently. Rules can target processes, domains, ports, or network ranges. Research mode watches silently before you decide; Silent Mode temporarily allows or denies everything without interrupting work. Rules are stored hierarchically and can be exported, imported, or synced across machines. - **Network Monitor & Traffic Visualization.** Network Monitor shows live activity on your Mac. The version 6 traffic chart maps where data is going geographically. The connection list groups live sessions by application, domain, or protocol, with volume transferred, duration, and status. Drill into a connection for full history, kill it on demand, or create a rule from what you see. Useful when debugging network issues or spotting odd outbound behaviour. - **Integrated DNS Encryption.** Little Snitch 6 encrypts DNS queries with DNS-over-HTTPS (DoH) or DNS-over-TLS (DoT) so ISPs and local network observers cannot easily read which hostnames you resolve. Pick a provider or point at your own DoH/DoT endpoint. It sits beside the firewall rules rather than replacing them. - **Curated Blocklists.** Version 6 adds curated blocklists you can subscribe to in one click: known malware domains, ad networks, trackers, analytics endpoints, and cryptocurrency miners. Lists update automatically and feed the same rule engine. That turns Little Snitch from pure monitoring into category-level blocking without writing a rule per domain. - **Control Center & Menu Bar Integration.** Control Center in the menu bar shows current activity, recent connections, bandwidth, and the active rule mode. Switch to Silent Mode, review recent alerts, or open common settings without launching the full Network Monitor. Optional sound notifications mark connection events. Designed to stay glanceable rather than noisy. - **Web Application & Homebrew Support.** Little Snitch 6 treats Safari Web Apps as separate entities from Safari itself, so docked websites get their own connection rules. Homebrew executable rules ignore version numbers in file paths, so package updates keep working without rewriting rules. Both changes track how Macs are actually used in 2026. - **macOS Tahoe Hardening & Integrity Monitoring.** Little Snitch 6.3 added first-class macOS 26 Tahoe support; 6.4 polished Tahoe menu icons, temporary unlock-until-quit for locked configurations, Touch ID changes to locked Control Center settings, biometric software-update authentication, and continuous app-bundle integrity checks while the app is running, not only at launch. Ghostty and other modern terminal bundle identifiers are recognised correctly. ## How to Install Little Snitch on Mac Little Snitch requires macOS Sonoma (14.0) or later, including Sequoia and Tahoe 26. Install via Homebrew (`brew install --cask little-snitch`) or the DMG from Objective Development. On Sequoia and Tahoe, approve the Network Extension under System Settings → Login Items & Extensions → Network Extensions; missing that pane is the most common false alarm that the install failed. Start in Research Mode for the first week, then promote silent observations into permanent allow/deny rules. 1. **Download Little Snitch.** Visit the official download page and download the latest version (6.4.1 as of June 2026), or use Homebrew: brew install --cask little-snitch 2. **Run the Installer.** Open the downloaded DMG file and double-click the Little Snitch installer. Follow the prompts to install the system extension. You will need to enter your administrator password. 3. **Grant System Permissions.** Open System Settings > Privacy & Security and approve the Little Snitch system extension under the 'System Extensions' or 'Allow' section. A restart may be required. ## Pros - Detailed real-time view of outbound connections - Per-app, per-domain, per-port rule control - Built-in DNS encryption without a second app - Curated blocklists for trackers and known-bad domains - Twenty-plus years of use among security and privacy practitioners ## Cons - Costs more than free options like LuLu - Needs system extension approval that some workplaces block - First week of alerts takes patience while you learn your apps - Noisy until rules match your software set ## How Little Snitch fits into macOS networking Little Snitch sits in the Network Extension path, so understanding that placement clarifies both strengths and limits. On Apple Silicon Macs, update only from Objective Development or the Homebrew cask, re-approve the Network Extension after major macOS upgrades (on Sequoia/Tahoe: Login Items & Extensions → Network Extensions), and export a rule backup after any large policy change via File → Create Backup in Network Monitor (XML exports version well in Git). Rules and alerts stay local; the product does not upload your connection log. License checks, optional update checks, and blocklist downloads are the only Little Snitch-originated network traffic most users see. Pair it with a VPN when you want app-level allow/deny plus tunnel encryption: Little Snitch evaluates before traffic enters the tunnel. Compared with LuLu (Objective-See, free, v4.5.x in 2026), you pay for the map, DNS presets including DNS4EU, hourly blocklists, biometric locks, and continuous app-bundle integrity checks added in the 6.3/6.4 line. Compared with Radio Silence, you get far more visibility and a steeper first-week learning curve. Hands Off! covers disk and network access more broadly but is less specialised as a pure outbound monitor. Proxyman remains the better pick for HTTP(S) API debugging, not for system-wide privacy firewalling. If an enterprise MDM forbids Network Extensions, neither Little Snitch nor LuLu will install cleanly, so check policy before buying. Impact on internet speed is minimal on modern Apple Silicon; closing the Network Monitor GUI leaves the lighter extension running. After high-profile reports of IDEs uploading large local trees even when AI features were unused, Mac developers on X again treated Little Snitch or free LuLu as default outbound visibility rather than optional extras. ## FAQ ### Is Little Snitch free? No. It is a paid one-time licence (Single about €59 / ~$59-$65). You can evaluate the full feature set for 30 days; past that window, installs without a key run in a limited demo mode. ### What is the latest version in August 2026? Little Snitch 6.4.1 (build 7212), released 22 June 2026 as a hot fix after 6.4 on 21 June. Version 6.3 (September 2025) introduced macOS 26 Tahoe support. ### Does Little Snitch protect against malware? It is not antivirus software, but it can surface unexpected outbound C2 or exfiltration attempts and can block known-bad domains via curated blocklists. Use it alongside dedicated malware protection. ### Will Little Snitch slow down my internet? Impact is minimal on modern Apple Silicon Macs. Rule evaluation is optimised; the Network Monitor uses more resources only while open. Closing the GUI leaves the lightweight system extension running. ### Can I use Little Snitch with a VPN? Yes. It operates before traffic enters the tunnel, so you retain app-level control plus VPN encryption. Many privacy workflows combine both tools. ### How is Little Snitch different from macOS Firewall? macOS Firewall focuses on inbound connections. Little Snitch specialises in outbound connections with per-app, per-domain, and per-port decisions, monitoring maps, DNS encryption, and blocklists. ### Does Little Snitch work with Apple Silicon and macOS Tahoe? Yes. It is Universal Binary for Intel and Apple Silicon and supports macOS Sonoma through Tahoe 26 as of the 6.3/6.4 line. ### What happened to the dns0.eu DNS preset? dns0.eu discontinued operations. Little Snitch 6.3-6.4 replaced that preset with DNS4EU and moved Quad9 presets to unfiltered endpoints. ### What's the difference between Little Snitch and Little Snitch Mini? Mini is a simpler Mac App Store product. The full version from Objective Development adds Network Monitor visualisation, DNS encryption, blocklists, profiles, and advanced rule management. ### Can I transfer my licence to a new Mac? Yes. A Single licence covers one user across multiple computers (or multiple users on one computer). Install on the new Mac and enter the same key; old installs deactivate when no longer in use under the licence terms. ## Sources - [Little Snitch Release Notes](https://www.obdev.at/products/littlesnitch/releasenotes.html) - [Order License - Little Snitch](https://www.obdev.at/products/littlesnitch/order.html) - [Little Snitch - MacUpdate](https://little-snitch.macupdate.com/) - [Little Snitch product overview](https://www.obdev.at/products/littlesnitch/index.html) - [Reddit: 6 months with Little Snitch 6](https://www.reddit.com/r/macapps/comments/1t45cy8/6months_with_little_snitch_6_what_i_learned_about/) - [Little Snitch Help Center](https://www.obdev.at/support/littlesnitch) - [MacRumors forum: Little Snitch 6 release discussion](https://forums.macrumors.com/threads/little-snitch-6-released-for-macos-sonoma-with-dns-encryption-integrated-blocklists-new-traffic-chart-and-more.2427091/) ## Related - [1Password](https://bundl.run/apps/1password) - [Tailscale](https://bundl.run/apps/tailscale-app) - [ZeroTier](https://bundl.run/apps/zerotier-one) - [Bitwarden](https://bundl.run/apps/bitwarden) - [KeePassXC](https://bundl.run/apps/keepassxc) - [ExpressVPN](https://bundl.run/apps/expressvpn) - [Little Snitch vs LuLu](https://bundl.run/compare/little-snitch-vs-lulu) - [Little Snitch vs Bitwarden](https://bundl.run/compare/little-snitch-vs-bitwarden) ```json { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://bundl.run/#organization", "name": "Bundl.run", "url": "https://bundl.run", "logo": { "@type": "ImageObject", "url": "https://bundl.run/og-image.png", "width": 1200, "height": 630 }, "description": "The Ninite for Mac. Install all your essential Mac apps with one terminal command.", "sameAs": [ "https://github.com/abhiofficial/bundl-mac-setup", "https://x.com/bundlrun", "https://www.producthunt.com/products/bundl-run" ], "foundingDate": "2024", "contactPoint": { "@type": "ContactPoint", "contactType": "customer support", "url": "https://bundl.run/faq" } }, { "@type": "WebSite", "@id": "https://bundl.run/#website", "name": "Bundl.run", "url": "https://bundl.run", "description": "The Ninite for Mac. Install all your essential Mac apps with one terminal command.", "publisher": { "@id": "https://bundl.run/#organization" }, "inLanguage": "en-US" }, { "@type": "Person", "@id": "https://bundl.run/authors/sam-patel#person", "name": "Sam Patel", "jobTitle": "Security & Privacy Researcher", "url": "https://bundl.run/authors/sam-patel", "worksFor": { "@id": "https://bundl.run/#organization" }, "description": "Sam Patel is a cybersecurity professional specializing in application security, privacy tools, and secure software practices. With over 9 years in information security—including roles at security firms and as an independent consultant—Sam evaluates applications for security vulnerabilities, data handling practices, and privacy implications. Sam holds multiple security certifications and regularly presents at security conferences. Each review includes assessment of encryption methods, data collection policies, and potential privacy concerns that users should understand.", "knowsAbout": [ "Security Software", "Privacy Tools", "Network Security", "Password Managers", "VPNs & Encryption", "macOS Security Hardening" ], "image": "https://bundl.run/authors/sam-patel.svg" }, { "@type": "BreadcrumbList", "@id": "https://bundl.run/apps/little-snitch#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://bundl.run" }, { "@type": "ListItem", "position": 2, "name": "Apps", "item": "https://bundl.run/apps" }, { "@type": "ListItem", "position": 3, "name": "Little Snitch", "item": "https://bundl.run/apps/little-snitch" } ] }, { "@type": "WebPage", "@id": "https://bundl.run/apps/little-snitch", "url": "https://bundl.run/apps/little-snitch", "name": "Little Snitch for Mac", "description": "Host-based application firewall", "isPartOf": { "@id": "https://bundl.run/#website" }, "publisher": { "@id": "https://bundl.run/#organization" }, "inLanguage": "en-US", "datePublished": "2026-01-01T00:00:00Z", "dateModified": "2026-08-10T13:34:04.000Z", "author": { "@id": "https://bundl.run/authors/sam-patel#person" }, "mainEntity": { "@id": "https://bundl.run/apps/little-snitch#software" }, "breadcrumb": { "@id": "https://bundl.run/apps/little-snitch#breadcrumb" } }, { "@type": "SoftwareApplication", "@id": "https://bundl.run/apps/little-snitch#software", "name": "Little Snitch", "description": "Host-based application firewall", "applicationCategory": "SecurityApplication", "operatingSystem": "macOS", "url": "https://bundl.run/apps/little-snitch", "image": { "@type": "ImageObject", "url": "https://img.logo.dev/www.obdev.at", "caption": "Little Snitch app icon for Mac" }, "sameAs": [ "https://www.obdev.at/products/littlesnitch/index.html", "https://formulae.brew.sh/cask/little-snitch" ], "review": { "@type": "Review", "author": { "@id": "https://bundl.run/authors/sam-patel#person" }, "reviewBody": "Buy Little Snitch 6 if you need professional outbound visibility on macOS in August 2026: Tahoe support, hourly blocklists, biometric unlocks, and continuous integrity checks still beat free tools for serious privacy work. Pick LuLu when the ~€59 Single licence is the deal-breaker." }, "about": { "@type": "Thing", "name": "Little Snitch", "description": "Host-based application firewall" }, "isPartOf": { "@id": "https://bundl.run/#website" } }, { "@type": "Article", "@id": "https://bundl.run/apps/little-snitch#article", "headline": "Little Snitch for Mac — Full Review & Installation Guide 2026", "description": "Buy Little Snitch 6 if you need professional outbound visibility on macOS in August 2026: Tahoe support, hourly blocklists, biometric unlocks, and continuous integrity checks still beat free tools for serious privacy work. Pick LuLu when the ~€59 Single licence is the deal-breaker.", "image": "https://img.logo.dev/www.obdev.at", "author": { "@id": "https://bundl.run/authors/sam-patel#person" }, "publisher": { "@id": "https://bundl.run/#organization" }, "datePublished": "2026-01-01T00:00:00Z", "dateModified": "2026-08-10T13:34:04.000Z", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://bundl.run/apps/little-snitch" }, "articleSection": "SecurityApplication", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", ".key-facts" ] }, "about": { "@type": "SoftwareApplication", "name": "Little Snitch", "url": "https://bundl.run/apps/little-snitch" } }, { "@type": "FAQPage", "@id": "https://bundl.run/apps/little-snitch#faq", "mainEntity": [ { "@type": "Question", "name": "Is Little Snitch free?", "acceptedAnswer": { "@type": "Answer", "text": "No. It is a paid one-time licence (Single about €59 / ~$59-$65). You can evaluate the full feature set for 30 days; past that window, installs without a key run in a limited demo mode." } }, { "@type": "Question", "name": "What is the latest version in August 2026?", "acceptedAnswer": { "@type": "Answer", "text": "Little Snitch 6.4.1 (build 7212), released 22 June 2026 as a hot fix after 6.4 on 21 June. Version 6.3 (September 2025) introduced macOS 26 Tahoe support." } }, { "@type": "Question", "name": "Does Little Snitch protect against malware?", "acceptedAnswer": { "@type": "Answer", "text": "It is not antivirus software, but it can surface unexpected outbound C2 or exfiltration attempts and can block known-bad domains via curated blocklists. Use it alongside dedicated malware protection." } }, { "@type": "Question", "name": "Will Little Snitch slow down my internet?", "acceptedAnswer": { "@type": "Answer", "text": "Impact is minimal on modern Apple Silicon Macs. Rule evaluation is optimised; the Network Monitor uses more resources only while open. Closing the GUI leaves the lightweight system extension running." } }, { "@type": "Question", "name": "Can I use Little Snitch with a VPN?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. It operates before traffic enters the tunnel, so you retain app-level control plus VPN encryption. Many privacy workflows combine both tools." } }, { "@type": "Question", "name": "How is Little Snitch different from macOS Firewall?", "acceptedAnswer": { "@type": "Answer", "text": "macOS Firewall focuses on inbound connections. Little Snitch specialises in outbound connections with per-app, per-domain, and per-port decisions, monitoring maps, DNS encryption, and blocklists." } }, { "@type": "Question", "name": "Does Little Snitch work with Apple Silicon and macOS Tahoe?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. It is Universal Binary for Intel and Apple Silicon and supports macOS Sonoma through Tahoe 26 as of the 6.3/6.4 line." } }, { "@type": "Question", "name": "What happened to the dns0.eu DNS preset?", "acceptedAnswer": { "@type": "Answer", "text": "dns0.eu discontinued operations. Little Snitch 6.3-6.4 replaced that preset with DNS4EU and moved Quad9 presets to unfiltered endpoints." } }, { "@type": "Question", "name": "What's the difference between Little Snitch and Little Snitch Mini?", "acceptedAnswer": { "@type": "Answer", "text": "Mini is a simpler Mac App Store product. The full version from Objective Development adds Network Monitor visualisation, DNS encryption, blocklists, profiles, and advanced rule management." } }, { "@type": "Question", "name": "Can I transfer my licence to a new Mac?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. A Single licence covers one user across multiple computers (or multiple users on one computer). Install on the new Mac and enter the same key; old installs deactivate when no longer in use under the licence terms." } } ], "isPartOf": { "@id": "https://bundl.run/apps/little-snitch" } } ] } ```