Little Snitch 5
Secure your outgoing internet connections
$45 From Objective Development, obdev.at
Needs macOS 11.0 or later
A software firewall aims to increase your security and privacy protection by looking at what’s trying to make outgoing connections. Malicious software phones home, usually to load the dangerous code, and an innocent–looking app could be quietly sending your private info to others.
Little Snitch has long been the unique tool to watch for attacks and leaks, as it monitors all outgoing connections and puts you in control. Big Sur presents a challenge: some of Apple’s software like Maps now bypasses controls, and the app can no longer rely on a kernel extension. Version 5 of Little Snitch uses a new System Extension instead, making it more compatible and easier to install.
Getting started is simple: the app installs its own extension, following your approval in the Security & Privacy pane. It’s then active without restarting and takes you through initial setup.
Little Snitch runs in two modes: Silent, which either allows or denies connections; and Alert, which can bombard you with decisions. First–timers should go for the default of Silent Mode allowing connections, and use its built–in rule groups for macOS and iCloud services. With more experience, when the app has added rules to accommodate normal use, switch to Alert to approve any unexpected connections. Silent Mode denying connections is best once you’re confident its filters are right. Access to those modes and other controls is from the menu bar, where you can also turn it off completely.
Like all powerful tools it can get you into difficulties if you don’t know what you’re doing. Try opening a newly downloaded app from the Downloads folder and macOS translocates it to a hidden folder for its first run. As Little Snitch relies on the path to an app for identification, any rules you make for that app won’t apply when you’ve moved it into your Applications folder. Solve this by moving apps into place before use.
Version 5 requires Big Sur and is fully compatible with Intel and Apple Silicon models. It’s stable, robust, imposes no overhead on network connection speeds, and is thoroughly well–designed.
THE BOTTOM LINE. When used with care there’s nothing better for improving your malware and privacy protection. HOWARD OAKLEY