Alternatives to OpenSnitch

An interactive application firewall for Linux that asks before letting any program make an outbound connection. The listings below can replace it for an important use case. Each note says what changes if you switch.

Replacements

Listings that take over the same core job as OpenSnitch.

  • Portmaster

    Shows every connection each application makes and lets you block any of them, with sensible defaults already set.

    FreemiumOpen sourceWindowsLinux

    Portmaster runs on Windows and Linux with tracker blocking and secure DNS preset, while network history search and bandwidth figures are paid.

  • LuLu

    Control outbound application connections on macOS.

    FreeOpen sourcemacOS

    LuLu is an open-source GPL-3.0 outbound firewall like OpenSnitch, but it runs on macOS instead of Linux.

  • Little Snitch

    macOS application firewall that prompts on outgoing connections.

    PaidProprietarymacOS

    Little Snitch prompts on outbound connections on macOS with a network monitor, but is closed source with a one-time paid licence.

  • simplewall

    Puts a plain list of programs in front of the Windows Filtering Platform, so you decide what is allowed online.

    FreeOpen sourceWindows

    simplewall runs on Windows using a plain allow and block list instead of prompts, with a portable build under a megabyte.

  • GlassWire

    Network monitor and firewall with a visual traffic history.

    FreemiumProprietaryWindowsAndroid

    GlassWire works on Windows and Android with a visual traffic history, is closed source, and puts longer history behind a paid licence.

  • NetGuard

    No-root Android firewall that blocks internet access per app.

    FreemiumOpen sourceAndroid

    NetGuard blocks internet access per app on Android without root, but occupies the VPN slot so it cannot run alongside a VPN.

  • AFWall+

    iptables firewall for rooted Android with per-app rules.

    FreeOpen sourceAndroid

    AFWall+ is an open-source iptables firewall for rooted Android with per-network rules, and it does not use the VPN slot.

  • TinyWall

    A free, lightweight firewall controller for Windows that works without pop-up prompts.

    FreeProprietaryWindows

    TinyWall is a free closed-source Windows firewall controller with no pop-up prompts or kernel drivers, so programs must be allowed manually.

Also worth comparing

These listings name OpenSnitch as their own alternative, so the relationship runs both ways.

  • firewalld

    A dynamically managed Linux firewall daemon with network zones and a D-Bus interface.

    FreeOpen sourceLinuxCommand line

    OpenSnitch is a GPL-3.0 Linux application firewall that prompts per program on outbound connections and can configure nftables inbound policy, adding a steady stream of prompts at first.

  • Picosnitch

    A Linux daemon that monitors network traffic per executable and alerts when new programs connect.

    FreeOpen sourceLinux

    OpenSnitch is an interactive Linux application firewall that prompts on and blocks new outbound connections, whereas Picosnitch only monitors and logs traffic.

  • ufw

    Uncomplicated Firewall, a command-line tool for managing a netfilter firewall on Linux.

    FreeOpen sourceLinuxCommand line

    OpenSnitch is a graphical Linux application firewall that prompts on each outbound connection and can manage the nftables firewall, trading ufw's simplicity for per-program control.

Similar software

Related functionality, not a direct replacement.