# LuLu

> Free, open-source firewall that blocks unknown outgoing connections and asks before new apps go online

Source: https://optioncmd.com/lulu
Website: https://objective-see.org/products/lulu.html?utm_source=optioncmd
Pricing: Free
Categories: [Security & privacy](https://optioncmd.com/categories/security-privacy.md)
Listed: 2026-10-23
Updated: 2026-10-23

LuLu is Objective-See's free, open-source firewall for Mac. It blocks unknown outgoing network connections and alerts you when a new app or process tries to reach the network.

**Key features:**

- Alerts show the process and destination, with code signing details, the process hierarchy and a VirusTotal lookup.
- Rules can cover a whole program or one remote endpoint, and can last always, for the process lifetime or until a set time.
- Programs are identified by their code signing identifier, so rules still apply after an app is moved or updated.
- A Rules window filters default, Apple, third-party, user and recent rules, with a text filter for names and endpoints.
- Rules can be added manually with wildcards or regular expressions for the remote address.
- Rules can be exported and imported, including only user-created rules.
- Default settings allow Apple and already installed programs so you are not flooded with alerts at first.

LuLu requires macOS 10.15 or later and installs as a System Extension and Network Filter that you approve in System Settings. It only monitors outgoing traffic. Version 4.5.3 is a free download from Objective-See, a non-profit foundation, with source code published.

## More security & privacy apps

- [1Password](https://optioncmd.com/1password.md): Password manager that autofills logins, cards and passkeys in your browser and Mac apps
- [Little Snitch](https://optioncmd.com/little-snitch.md): Network monitor and application firewall that alerts you when an app connects and lets you allow or deny it
- [Bitwarden](https://optioncmd.com/bitwarden.md): Open-source password manager with end-to-end encryption, passkeys and encrypted sharing through Send
- [Mullvad VPN](https://optioncmd.com/mullvad-vpn.md): Privacy-focused WireGuard VPN with a flat monthly price and anonymous accounts
- [Proton Pass](https://optioncmd.com/proton-pass.md): End-to-end encrypted password manager with hide-my-email aliases, from the makers of Proton Mail
- [Signal](https://optioncmd.com/signal.md): Desktop app for the Signal private messenger, linked to Signal on your phone
- [Arq](https://optioncmd.com/arq.md): Encrypted, versioned backup to your own cloud storage, NAS or external drive
- [Cryptomator](https://optioncmd.com/cryptomator.md): Free, open-source encryption for files in cloud storage, using password-protected vaults
- [Backblaze Computer Backup](https://optioncmd.com/backblaze.md): Unlimited, automatic cloud backup for your Mac and external drives