Founding offer$29 for the first 50 licences, then $39First 50 licences: $29

Choose where your apps are allowed to connect.

See every app that reaches the internet, where it goes and how much it sends. Allow or block any of it in a click.

Buy OutboundSee how it works
  • No account, no sign-up
  • One-time, no subscription
  • Full refund within 14 days
Outbound Overview, Protected in Ask mode: four apps sent data to known trackers, led by Mixpanel, Datadog and Sentry; the last hour’s apps, connections, blocks and traffic; and 10 connections to review
Outbound Network Monitor on a flat map from this Mac in India: 11 apps, 16 places, 90 allowed and 20 blocked connections, the app list below, and an inspector explaining that Safari’s connection to www.apple.com on port 443 TCP was allowed by Ask mode because no rule covers it
Outbound connection question: Google Chrome (Helper) wants to connect to accounts.google.com on port 443 TCP, a new destination it has never reached before, with Forever, This host and Only 443 (TCP) selected, an Only while Home is active option, a 50-second countdown to allow automatically, Block and Allow buttons, a waiting list of 15 requests from Slack, Google Chrome (Helper), Spotify and curl, and Block All and Allow All for 11 more from Google Chrome (Helper)
Outbound All Rules: 13 rules written as sentences, with 6 allowed, 6 blocked and 1 Ask rule; blocklist, profile and organization tags, temporary lifetimes, and a checkbox for each rule, with Slack’s block of mixpanel.com turned off
Outbound Review: 10 connections decided without asking, grouped by 4 apps: Slack with 2 destinations, all allowed; Google Chrome (Helper) with 5, all allowed; Spotify with 2, all blocked; and Node.js with 1, blocked, each with block and allow controls
Outbound Network Monitor in 3D: a globe from Apple Maps with this Mac in India and arcs to the places its apps reach, above the app list, and an inspector explaining that Safari’s connection to ads.doubleclick.net was blocked

macOS 14 or later, Apple silicon and Intel. Screenshots from the app; the connections are examples.

Right now

Your apps connect to more than you think.

Updaters and ad networks reach out in the background all day, along with telemetry: the usage and crash reports apps send home. You can want the app without wanting every connection it makes.

The firewall built into macOS handles incoming connections. Outbound handles the outgoing ones. You see each connection as it happens, keep the app, and stop the destinations you don’t want.

Network MonitorExample · 1,284 seen today
An example feed of connections: Safari to www.apple.com allowed, Zoom to telemetry.zoom.us blocked, Chrome to accounts.google.com waiting for an answer, and more.

An app reaches out. You decide.

In Ask mode, Outbound checks with you before an app connects somewhere new. Answer once, or save your answer as a rule. The menu bar shows what it allowed and blocked.

Example alert.

Your first days

Quiet at first. Then it’s your call.

Outbound watches before it asks, and you choose when it gets stricter.

  1. From the first day

    Learn

    Connections that match no rule go through and land in Review, so you see what your apps do before you decide anything. Your own rules still apply.

  2. After a few days

    Ask

    Outbound suggests Ask. Keep what Learn recorded as rules, and from then on it only asks about what’s new.

  3. Whenever you want

    Strict

    Connections that match no rule are blocked without a question. Your rules still apply, and the menu bar switches between the three.

In Ask mode, a question you leave unanswered lets the connection through by default after 60 seconds (8 for UDP) and puts it in Review. You can have it blocked instead.

Up close

Get to know Outbound.

Real screenshots of Outbound 1.2, with example data.

  • Coding agents

    Coding agents, by name.

    Outbound connection question for Claude Code: ingest.quietcdn.dev, flagged as possibly telemetry from its name and a first connection to quietcdn.dev, with Forever, This host and Only 443 (TCP) selected, an Only while Home is active option, a 55-second countdown to block automatically, and Block and Allow buttons

  • Telemetry

    Telemetry, off at the source.

    Outbound telemetry sheet for Claude Code: seen reaching Datadog, three environment variables that turn off its usage metrics, non-essential traffic and error reports, each with Copy and a link to the maker’s documentation, and the switch to block this app’s known telemetry servers

  • Your rules

    Type a rule, check the fields.

    Outbound new rule sheet from the sentence Block *.steampowered.com on school nights, 9 PM to 7 AM: any app, the destination *.steampowered.com, and Lasts On a schedule, Sunday to Thursday nights from 9:00 PM to 7:00 AM

  • One click away

    All of it from the menu bar.

    Outbound Control Center from the menu bar: Protected in Ask mode with Pause and more buttons, Widgets with Edit, Rule Sounds on, Live Rate of 49 KB/s up and 799 KB/s down, 20 blocked in 24 hours, 16 destinations on a world map, the active apps with their speeds, recently blocked hosts for Claude Code and Safari, and the menu commands

  • Network Monitor

    Flat map or 3D globe.

    Outbound Network Monitor with the list beside a 3D globe from Apple Maps turned to Asia, arcs from this Mac in India, and the last hour’s traffic chart

  • Profiles

    Rules for each place you work.

    Outbound Profiles: Home active and Office, each with 1 rule and Mode unchanged; automatic network switching on and Ask selected for new networks. Home Wi-Fi and Wi-Fi home.lan use Home; Office Ethernet, Office VPN, Ethernet corp.example and Work VPN at vpn.corp.example use Office; Travel network with a long descriptive name and Wi-Fi Café use Don’t switch; Conference Wi-Fi and Phone USB use No Profile
See every feature

Network Monitor

Your traffic, on a map.

Arcs run from your Mac to every city your apps reach, on a flat map or a 3D globe. Blocked destinations show in red.

Outbound Network Monitor in 3D: a globe from Apple Maps with this Mac in India and arcs to the places its apps reach, above the app list, and an inspector explaining that Safari’s connection to ads.doubleclick.net was blocked

How it works

One layer between your apps and the internet.

Outbound is a content filter in macOS, so every new connection passes it once. Most go through, some stop, and in Ask mode one waits for you.

How Outbound is built

Features

How Outbound decides.

Choose the app, the destination and how long the rule lasts.

One clear question. In Ask mode, Outbound asks about connections no rule covers. You see the app, who signed it, where it’s going and whether that server belongs to the same developer.

One app, one row. Background helpers sit under the app they belong to. A browser running a dozen processes shows up as one row.

Rules like sentences. A rule spells out the app, the host, the port, how long it lasts and where it came from. Priority rules override all the rest.

Eleven lifetimes. Allow or block it once, for 5, 15 or 30 minutes, an hour, a day or a week, until the app quits, until you log out, until your Mac restarts, or forever.

Checked on your Mac. Outbound checks each connection on your Mac, and the record stays there. Crash reports and usage stats are off until you turn them on.

Learn, Ask, Strict. Learn allows and keeps a record, Ask checks with you first, and Strict blocks anything that has no rule. Your rules apply in all three, and the menu bar switches between them.

11ways to remember an answer
Once, for 5 minutes to a week, until the app quits, until you log out, until restart, or forever.
2Mentries a blocklist can hold
Choose from 60 lists or add your own over HTTPS. If an update fails, the last good copy stays.
0accounts
There’s nothing to sign up for.

Up close

More than a firewall.

Reports, answers and a score, worked out on your Mac from your own history.

Tracking Report

Which apps talk to trackers.

By app or by company, for the last hour up to everything since install. Open an app to see each tracker server it contacted, and, where it’s safe, block that app’s trackers with one switch.

Trackers and Highlights
Outbound Tracking Report with Apps selected: developer tools listed on the left and Claude Code selected, seen on this Mac, with two known Datadog telemetry servers, http-intake.logs.us5.datadoghq.com and browser-intake-us5-datadoghq.com; below, export DISABLE_TELEMETRY=1 turns off usage metrics, with Copy and Maker’s documentation

Assistant

Ask about your network.

Ask in plain words and get an answer from the records Outbound already has, with a chart and the records behind it. By default it runs on your Mac with Apple Intelligence.

Intelligence
Outbound Assistant answering which apps opened the most connections today: Tailscale with 476, Google Chrome with 153, ChatGPT with 68 and WhatsApp with 52, as a bar chart and app cards, while a second question, Where does Tailscale connect today, shows Reading this Mac’s records

Highlights

A privacy score, and your year.

Today’s score out of 100 from protection, trackers blocked and Review. Year in Review plays your year as six pages you can share.

See Highlights
Outbound Year in Review story, Where It Went: 5 countries, Germany, United Kingdom, Japan, United States and Brazil, above a golden globe, with Done, playback and Share buttons

Notch island and menu bar

First contact, at the top of the screen.

When an app reaches a new country, a capsule grows out of the notch, names who went where and draws the route. Beside the menu bar meter, a tiny world threads each place reached in the last seconds.

Labs

Map and globe

Your traffic on a world you can turn.

Arcs from this Mac to every place your apps reach, on a dotted map or a 3D globe. Grab it, let go and it coasts. Five themes, from Graphite to Amber.

Network Monitor
The same globe in five themes, left to right: Graphite, Blue Marble, Midnight, Daylight and Amber. On a phone, only the first two are shown.

Architecture

Built on Apple’s own filter.

A Network Extension content filter. No kernel extension. No DNS proxy. It sees connections, never their contents. A transparent proxy runs only for apps you give a speed limit.

Built to be checked
AppsNo DNS proxyOutbound content filtermacOS networkingNo kernel extension

Privacy and safety

Private by design. Safe to run.

Privacy

  • Kept on your Mac. Your rules and history stay on this Mac. History is encrypted, with its key in your Keychain. Optional AI features get figures only after you turn them on.
  • Diagnostics off by default. Crash reports and usage stats stay off unless you turn them on.
  • Locations found offline. Server locations come from a database on your Mac.
  • No DNS proxy. Outbound filters through Apple’s content-filter API, built to run alongside VPN apps and iCloud Private Relay. A transparent proxy runs only for apps you give a speed limit.
How Outbound handles data

Safety

  • Apple software, verified. Trusted only when Apple signed it and it runs from a location macOS protects.
  • Questions time out. Leave one unanswered and, by default, the connection goes through and waits in Review.
  • Rules you can undo. Each rule lasts as long as you chose, and importing keeps a backup of your old set.
  • A way back. If something stops working, pause Outbound from the menu bar.
How Outbound is built

Compared

Outbound and Little Snitch, side by side.

If you’re weighing Little Snitch, here’s how the two line up.

FeatureOutboundLittle Snitch
Price$29USD for the first 50 Personal licences, then $39€59EUR, single licence
Major updatesYesIncluded through 2.xNoPaid upgrade
Asks about new connectionsYesYes
Rules by app, host and portYesYes
Traffic mapYesYes
Profiles that follow your networkYesYes
Managed MacsYesMDM, rule feed, sealed audit logYesRemote rule groups

Read the full comparison

Why Outbound. The fine print, up front.

See pricing

  • 29 US dollars Pay once.

    USD for the first 50 Personal licences.

  • Version 2.x Updates included.

    Every 1.x and 2.x update.

  • Zero Accounts.

    Nothing to sign up for.

  • 14 Days to change your mind.

    A full refund for Personal and Family.

  • 5 Macs with Family.

    Personal covers 2 Macs.

  • MDM Ready for managed Macs.

    Rule feeds and sealed audit logs.

Pricing

Pay once. First 50 licences: $29.

Personal and Family are paid once, tax included. Personal covers 2 Macs and Family covers 5. Teams is billed yearly.

Personal

Founding price

$29$39USD
one time

For the first 50 licences, then $39.

  • 2 Macs
  • Per-app and per-host rules
  • Network Monitor, map and Review
  • Profiles and blocklists
  • Command-line control
  • All 1.x and 2.x updates

Family

5 Macs

$59USD
one time

One licence for the Macs at home.

  • Everything in Personal, on 5 Macs
  • All 1.x and 2.x updates
  • No subscription

Teams

Per seat

Let’s talk

One seat per Mac, billed yearly. A quote within 2 business days.

  • MDM configuration profiles
  • Managed rule feed over HTTPS
  • Optional SHA‑256 pinning
  • Audit export and SIEM delivery
Contact us

  • Key by email. Your licence key arrives right after checkout.

  • Pay once. Personal and Family have no subscription, and you don’t need an account.

  • Updates included. All 1.x and 2.x releases.

  • Tax included. The price you see is the price you pay.

If Outbound isn’t for you, you can get a full refund within 14 days. Dodo Payments, the merchant of record, runs checkout. Questions before you buy? Email support.

Outbound essentials.

All guides

Questions

The short answers first. Every window, setting and command is in the manual.

Price
$39 once for 2 Macs. The first 50 licences are $29.
Refund
Full refund within 14 days of purchase.
Runs on
macOS 14 or later, Apple silicon or Intel.
Analytics
Off by default. Rules and logs stay on your Mac.

Read the full FAQOpen the manual

Still asking? Send us a message and we’ll reply by email.

Contact support
Does the built-in macOS firewall block outgoing connections?

No. Apple’s firewall settings control incoming connections. Outbound filters outgoing ones, per app and destination, so the two do different jobs.

Can I see what Claude Code, Codex or Cursor connect to?

Yes. To Outbound, a coding agent is an app like any other. Each one appears under its own name and icon, even when it runs from a versioned folder or a bundled Node.js, along with the hosts it reached and the bytes it sent to each. In Ask mode, Outbound asks you before an agent connects somewhere new, and a rule can block one agent from one host while the others keep working. The AI Agents and Coding Tools filter lists your AI apps and anything that talks to an AI service.

Is there a free trial?

No. You pay once and get a licence key by email. The download is the full app, and it opens with that key. If Outbound isn’t for you, you get a full refund within 14 days of purchase.

How much does Outbound cost?

A personal licence is $39 USD, paid once, and covers 2 Macs. The first 50 licences are $29. A family licence is $59 USD for 5 Macs. Licences include all 1.x and 2.x updates. There’s no trial, but you can get a full refund within 14 days of purchase.

What happens when I don’t answer an alert?

In Ask mode, unanswered connections are allowed after 8 seconds for UDP or 60 seconds for TCP by default, then added to Review. You can change the wait (15–120 seconds for TCP) or have unanswered connections blocked. Strict mode blocks connections that have no matching rule.

Does Outbound collect analytics?

Only if you turn it on. Anonymous crash reports and usage stats are off by default, and you can turn them on in Settings. Your rules, settings and audit logs are stored on your Mac. The app fetches the blocklists you add and, on managed Macs, the rule feed your administrator sets. A cloud model you add for the Analytics overview gets figures only after you turn on Send figures to it. Administrators can export audit logs to a destination they choose.

Which Macs does Outbound require?

macOS 14 Sonoma or later, including macOS 15, 26 and 27, on Apple silicon, and on Intel Macs up to macOS 26. On a macOS newer than 27.2, Outbound asks you to update it. Explain and the Assistant’s free-form questions need Apple Intelligence on macOS 26 or later.

Can I allow an app but block some of its hosts?

Yes. Outbound rules combine an app with a host, domain, IP address, network range or local network, plus ports and protocol. A domain rule also covers its subdomains. If the app connected by name you see the hostname; if it didn’t, Outbound shows the address.

Outbound app icon

Choose where your apps connect.

Outbound is $29 for the first 50 licences, then $39. Either way, you pay once.

Buy OutboundSee pricing
  • 2 Macs, or 5 with Family
  • One-time, no subscription
  • Full refund within 14 days
  • macOS 14 or later
$29first 50 licencesBuy now