LuLu for MAC
Free, open-source firewall for Mac that alerts you to unknown outgoing connections and blocks them.
LuLu Overview
LuLu is a free, open-source firewall for Mac. Almost every app connects to the internet, and so does malware; LuLu watches outgoing network connections and asks you whenever a program it doesn't know tries to connect, so you can allow it or block it. Your decisions become rules, and LuLu applies them from then on. LuLu is made by Objective-See, a non-profit foundation for Mac security tools, and is released under the GPL-3.0 license.
LuLu needs macOS 10.15 Catalina or later and uses Apple's Network Extension framework, which you approve in System Settings the first time you open it. The developer recommends keeping macOS up to date, and on macOS 15 Sequoia using at least macOS 15.3.
Key Features
LuLu runs in the menu bar and alerts you only for connections that no rule covers yet.
- Connection alerts: see which program wants to connect and where, then allow or block it.
- Rules: allow or block a whole program or one destination, for always, for this run or for a set time.
- Program details: check code signing, process origin and VirusTotal results from the alert.
- Rules window: filter, edit and add rules, including rules with regular expressions.
- Passive mode: run silently and apply your rules without alerts.
- Allow and block lists: block or allow lists of addresses in one go.
- Profiles: keep separate sets of rules and settings and switch between them.
- Sensible defaults: Apple programs and apps you already have can be allowed automatically.
What’s New in Version 4.5.1
LuLu 4.5.1 improves rules and startup.
- Improved logic in the Add Rules window, with better handling of deleted or invalid rules
- Improved startup, with new check-in logic that handles upgrades better
LuLu FAQ
Is LuLu free?
Yes. LuLu is free and open source, released under the GPL-3.0 license. It is made by Objective-See, a non-profit foundation, and you can support it with a sponsorship.
What does LuLu do?
LuLu is a firewall for outgoing connections. When a program it doesn't know tries to connect to the internet, LuLu shows an alert so you can allow or block it, which can stop malware or apps from sending data without your knowledge.
How is LuLu different from the macOS firewall?
The firewall built into macOS controls incoming connections. LuLu controls outgoing connections, the ones programs on your Mac make to the internet.
Which macOS version does LuLu need?
LuLu 4.5.1 needs macOS 10.15 Catalina or later. The developer recommends the latest version of macOS, and at least macOS 15.3 on Sequoia.
How do I install LuLu?
Open the LuLu disk image, drag LuLu to Applications and open it from there. LuLu then guides you through approving its system extension and network filter in System Settings.
Will LuLu ask me about every app?
No. By default LuLu allows Apple programs and the apps you already have, so it mainly asks about new programs. Each decision becomes a rule, and you are not asked again.
What is passive mode in LuLu?
In passive mode, LuLu runs silently without alerts and applies your existing rules. You choose whether new connections are allowed or blocked while it is on.
Can LuLu block a list of websites or addresses?
Yes. In LuLu's settings you can add a block list and an allow list. Connections to anything on the block list are blocked, whatever your other rules say.
What are profiles in LuLu?
A profile is a separate set of rules and settings. You can create several, for example for home and travel, and switch between them from the menu bar.
Where does the LuLu download on lulu.FULLMAC.app come from?
The download button leads to LuLu's official page on Objective-See's website at https://objective-see.org/products/lulu.html. lulu.FULLMAC.app does not change or repackage the app.
Similar Apps
ClearanceKitClearanceKit is a free, open-source tool that controls which programs on your Mac may touch your sensitive files. It uses Apple's Endpoint Security framework to watch file-system events such as opens, renames, deletions, copies and directory reads, and blocks any process that accesses a protected path without an explicit allow rule. It is aimed at developer machines, where an unsandboxed npm, pip or brew install script runs with your full permissions and could otherwise read folders such as ~/.ssh, cloud credentials or browser cookies.Security
MakLockMakLock is a lightweight menu bar app that protects your macOS applications with Touch ID, Apple Watch proximity or a backup password. When someone tries to open or switch to a protected app, MakLock blocks access with a full-screen blur overlay on all your monitors and asks for authentication. It watches for app switches as well as launches, so returning to an app that is already running also needs unlocking.Security
KnockKnockKnockKnock is a free, open-source Mac security tool that shows what is persistently installed on your computer. Malware usually installs itself so that it runs again each time the Mac restarts, and KnockKnock uncovers software that has done this, whatever its name. Press Start Scan and it goes through the known places where such software can hide, then lists what it found by category, with the number of items in each.Security
ExifCleanerExifCleaner removes hidden metadata from images, media files and PDFs, such as the GPS location, camera details and dates that photos often carry. Drag and drop files or whole folders onto the window and it cleans them in a fast batch, using ExifTool behind the scenes. You can expand any processed file to see exactly what was removed, before and after.Security
Pareto SecurityPareto Security helps you keep up basic security on your Mac. It lives in the menu bar and regularly checks common settings that are easy to forget: whether FileVault disk encryption is on, the firewall is enabled, automatic login is off, Gatekeeper is active, the screen locks automatically and your apps are kept up to date. When something is off, it gently reminds you to fix it. The idea behind the name is the Pareto principle: take care of the 20% of security tasks that prevent 80% of problems.Security- Little SnitchLittle Snitch shows you where your Mac connects to on the internet and lets you decide what is allowed. Whenever an app wants to connect, a connection alert asks you to allow or deny it, so no data leaves your Mac without your consent. Its Network Monitor shows all connections in real time, on a world map and in a traffic chart, grouped by app, domain or country. Little Snitch is made by Objective Development and has been protecting Macs for more than 20 years.Security
More from Objective-See
FULLMAC.app does not host this app. Download buttons lead to the developer’s own pages.