LuLu
LuLu is a free, open-source firewall for macOS that alerts about and blocks unknown outgoing network connections.
What LuLu is
LuLu is a free, open-source firewall for macOS that alerts about and blocks unknown outgoing network connections. Alerts identify the process and destination, and can show code-signing details and process origins. Users can create rules to allow or block connections for a process or a specific remote endpoint, either temporarily or permanently. Allow and block lists can draw on local files or remote URLs; if both lists are configured, matching block-list entries take priority. Profiles keep separate rules and settings, but only the active profile is used to decide connections. LuLu monitors outgoing traffic, although some traffic may bypass macOS Network Extensions and consequently may not be visible or blockable. The listed requirement is macOS 10.15 or later. The app includes Objective-See’s Netiquette network monitor, which can be opened from the status-bar menu. A VirusTotal lookup opens only after the user clicks the alert button, and the lookup URL includes the item’s hash. The maker says the automatic version check sends no user or product information and can be disabled in settings.
Good
- Free and open-source.
- Rules can be temporary or permanent.
- Alerts identify processes and destinations.
- Includes the Netiquette network monitor.
Watch out
- Requires macOS 10.15 or later.
- Some outgoing traffic may not be visible or blockable.
- Only the active profile governs connection decisions.
Who it suits
LuLu suits Mac users who want alerts and rules for unknown outgoing network connections. Its profiles can help people keep separate connection rules and settings.
Verdict
LuLu offers connection alerts, configurable rules, and profiles for macOS. Its monitoring is limited to traffic visible through macOS Network Extensions, so it may not cover every outgoing connection.
Plans and prices
From LuLu's own pricing page, checked 11 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| LuLu | Free | macOS 10.15+ · outgoing connections |
The facts
Each one read from LuLu's own pages, with the date it was checked.
What it does
- Alerts
- Alerts show the process and destination, and can display code-signing details and process origins.checked 11 Oct 2026
- Compatibility
- The product page lists macOS 10.15 or later as the platform requirement.checked 11 Oct 2026
- Lists
- Allow and block lists can use local files or remote URLs, and block-list matches take priority when both lists are configured.checked 11 Oct 2026
- Network monitor
- LuLu packages Objective-See's Netiquette network monitor, which can be opened from the status-bar menu.checked 11 Oct 2026
- Network scope
- LuLu monitors outgoing traffic, and some traffic may not pass through macOS Network Extensions and therefore may not be visible or blockable by LuLu.checked 11 Oct 2026
- Privacy
- The maker says LuLu's automatic version check sends no user or product information, and the check can be disabled in settings.checked 11 Oct 2026
- Profiles
- Profiles keep separate rules and settings, and only the active profile is used to make connection decisions.checked 11 Oct 2026
- Purpose
- LuLu is a free, open-source firewall that alerts about and blocks unknown outgoing network connections.checked 11 Oct 2026
- Rules
- Rules can allow or block connections for a process or a specific remote endpoint, with permanent or temporary durations.checked 11 Oct 2026
- Support
- The maker directs users to create bug reports through LuLu's GitHub repository.checked 11 Oct 2026
- VirusTotal
- LuLu opens a VirusTotal lookup only when the user clicks the alert button, using a URL that includes the item's hash.checked 11 Oct 2026
Money
- Free plan
- Yeschecked 22 Sep 2026
The company
- Maker
- Objective-See describes itself as a nonprofit foundation focused on macOS security and free, open-source tools.checked 11 Oct 2026
Alternatives to LuLu
- 1

Avast One
Free planAndroidiOSExtensionmacOS8.1Free plan - 2

PC Matic
AndroidiOSWebAPI7.9From $30 a year - 3

F-Secure Internet Security
AndroidiOSWebAPI7.8 - 4
ClamAV
Free planOpen sourceAPILinuxmacOSSelf-hosted7.6Free plan - 5

Avira Free Security
Free planAndroidiOSAPIExtension7.5Free plan - 6
Microsoft Defender for Business
AndroidiOSAPImacOS7.5
