Firewall Scudo — Mac download

macOS lets apps phone home without asking. Firewall Scudo fixes that by putting you back in charge of inbound and outbound connections.

One-tap allow or block on first app connection

The moment an app tries to reach the network, Scudo shows a notification. You allow or block access right there, and decide if the rule sticks permanently or expires.

What about incoming connections?

When a remote computer probes a local service, Scudo alerts you. Its built-in library of service rules gives you a starting point, and you can reorder custom rules to set priority.

Can I manage something like a database port?

Create a custom rule for the specific network service. Set it to allow traffic on that port and apply it to the managed app. The rule stays sandboxed to that one process.

Menu bar pause and active rule glance

The menu bar icon does more than open the main window. A click shows active rules at a glance, and a right-click reveals quick toggles for the firewall state. You can pause filtering for a few minutes without digging through settings.

Two details save real time:

• Location awareness — Scudo tightens inbound rules automatically when you join an untrusted Wi-Fi hotspot. File sharing stays off on café networks without you touching a thing.
• Profile switching — Save a configuration profile for home, one for travel, one for client sites. One click swaps the entire ruleset.

Notifications also show the process name, not just a vague “app wants to connect.” That makes a difference when a helper process from a larger suite tries to reach out.

Layered alongside Little Snitch without AirDrop breakage

Scudo plays well with macOS features you already use. Because it works at the network and application layers, it complements Little Snitch–style monitoring rather than fighting it. File sharing services respond to inbound rules without breaking AirDrop or Handoff.

It also respects the sandbox. Block an app’s outbound connection and the app still works locally — no broken launch, no missing files. For anyone who runs local development servers, allowing a port for one process while blocking it for others keeps things tidy.

Looking to replace a heavy firewall setup built in pf? Scudo gives you the same control without editing config files by hand. Download firewall Scudo for Mac and start with the built-in service library.

• macOS 11.3 or later
• Apple Silicon or Intel