LuLu is a free, open-source macOS firewall from security researcher Patrick Wardle that intercepts outbound network connections and prompts you to allow or block them on a per-application basis.
What is LuLu?
LuLu is an open-source outbound firewall for macOS, built and maintained by Objective-See — the one-person security research shop behind some of the most respected free Mac security tools available. Where macOS's built-in firewall only covers inbound connections, LuLu fills the blind spot by watching what your apps are trying to send out. Every time a new process attempts to reach the internet, a clean alert appears asking whether you want to permit or deny the connection — permanently or just once.
I've been running LuLu for months and the mental model is refreshingly simple: if you didn't expect an app to phone home, LuLu tells you it's trying to. That's the whole pitch, executed with unusual clarity.
What does LuLu do best?
LuLu excels at making invisible network activity visible — without requiring you to hold a computer-science degree to act on what you see. The alert dialog names the process, shows the destination IP and domain, and lets you allow or block in a single click. Repeated decisions build up as rules you can review and edit at any time in the companion rules window.
A few things stand out after extended use:
- Process-level granularity. Helper binaries and background daemons each get their own rule — you're not making a blanket decision for a whole app bundle.
- Passive mode. If the alert cadence feels like too much during a crunch, you can silence prompts temporarily while still logging everything for later review.
- Apple Silicon native. The app runs fully native on both Intel and M-series Macs.
- No analytics, no cloud. Because Objective-See is a non-profit research operation, LuLu collects nothing about you. The code is auditable on GitHub.
Compared to commercial alternatives like Little Snitch or Lulu's paid sibling-in-spirit Radio Silence, LuLu trades polished network-map visualizations for zero cost and complete transparency. If you want a gorgeous real-time traffic graph, Little Snitch wins on aesthetics. If you want trustworthy open-source code that does the critical job, LuLu is hard to argue with.
Is LuLu free?
Yes — LuLu is completely free to download and use, with no pro tier, no subscription, and no nag screen. Objective-See funds its work through donations; if LuLu catches something alarming on your machine, throwing a few dollars at the project is well-deserved. The source code is publicly available, so the community can verify exactly what the firewall is and isn't doing.
Who should use LuLu?
LuLu is the right fit for security-conscious Mac users who want to know which apps are dialing out, particularly developers, sysadmins, journalists, and privacy-minded power users. It's also a natural choice for anyone who has wondered whether a freshly installed app is quietly sending telemetry — because LuLu will literally ask you before it can.
It's probably overkill for casual users who aren't prepared to make allow/block decisions on unfamiliar process names. The first few days of use involve a burst of prompts as LuLu learns your app inventory; if that friction is a dealbreaker, Radio Silence offers a simpler (but paid) experience, and Little Snitch's automatic-allow-for-signed-Apple-binaries mode smooths the onboarding considerably. But if you're already comfortable in Activity Monitor and Terminal, LuLu slots in naturally.
How does LuLu compare to Little Snitch?
Little Snitch is the gold standard for Mac outbound firewalls — its live network monitor, per-connection traffic stats, and polished rule interface are genuinely excellent. LuLu matches it on the fundamental capability (alert on new outbound connections, build persistent rules) while being free, open-source, and lighter on system resources. Little Snitch costs around $59 and earns it for power users who want deep visibility; LuLu is the right answer for users who want the security guarantee without the price tag or the complexity. I run LuLu on machines where Little Snitch isn't licensed and notice no meaningful difference in protection — just fewer graphs.
What are the best LuLu alternatives?
The main alternatives are Little Snitch (paid, richest feature set, beautiful UI), Radio Silence (paid, minimal UI, easier onboarding), and Murus (wraps macOS's built-in PF firewall, skews toward inbound filtering). For users who want a pure open-source option, LuLu is effectively the only serious choice in the category — no comparable free competitor exists at the time of writing.
