LuLu

People searching for LuLu usually want three answers fast: is it free, does it replace Little Snitch, and will it work on Apple Silicon with current macOS. Free: yes. Replace Little Snitch: no for power users who want DNS encryption, maps, and polished history; yes as a starting outbound firewall for everyone else. Apple Silicon and Tahoe: yes, with Network Extension approval. LuLu filters outbound connections using Apple's Network Extension framework rather than legacy kernel extensions. That is why you approve a system extension and why some privileged traffic never appears in alerts. When an unknown process opens a new outbound socket, LuLu shows process name, destination, and code-signing context so you can allow or block once, until quit, or permanently. Rules prefer signing identifiers over brittle paths, which is why updates are less noisy than older path-only blockers. Profiles (v4+) keep separate rule and setting sets. A locked-down travel profile and a permissive build profile are the common pattern. Allow and block lists point at local files or remote URLs, refresh on a schedule for remote sources, and let block lists win when both match. Passive mode applies existing rules quietly and auto-allows or auto-denies new connections based on your choice. Global block is the panic switch with the documented caveat that traffic outside Network Extension visibility cannot be stopped. Netiquette ships packaged for quick socket triage. VirusTotal is opt-in per click, not a silent cloud mirror of your traffic. Update checks hit Objective-See version metadata; you can disable them. Enterprise MDM packaging is community-driven, so pilot before fleet rollout. LuLu vs Little Snitch is the comparison that decides upgrades. Little Snitch adds a full network monitor with maps and long history, DNS encryption to trusted resolvers, curated blocklist topics, automatic profile switching, and commercial support. LuLu wins price and openness. Many Macs run LuLu for years without needing more. When you outgrow it, you usually know: you want DNS policy, richer forensics, or less DIY list management. Dealbreakers: if you need guaranteed interception of every packet, neither userspace Network Extension tool is a magical total firewall; some system paths bypass them. If you need a vendor SLA, buy commercial software. If you need free and good enough with honest limits, LuLu remains the standard Objective-See answer in August 2026.