Founding offer$29 for the first 50 licences, then $39First 50 licences $29

Choose where your appsare allowed to connect.

Outbound shows which apps reach the internet, where each connection goes, how much it sent and why it was allowed. You can change any of it in one click.

Buy OutboundTake the tour
  • No account, no sign-up
  • 2 Macs per licence
  • One-time, no subscription
  • Full refund within 14 days
  • macOS 14+, Apple silicon and Intel
Outbound Overview: Protected in Ask mode with 11 rules and 2 blocklists; apps online, connections, blocked, sent and received in the last hour; a traffic chart; connections that need review; and the top apps
Outbound Network Monitor: a flat map from this Mac in India to Europe and Hong Kong above the list of apps, each with the data it sent and received, and an inspector explaining why Safari’s connection to www.apple.com was allowedOutbound connection question: Google Chrome wants to connect to accounts.google.com on port 443, with a choice of how long to remember, a countdown and Allow and Deny, next to a queue of four waiting apps
Outbound Rules: rules grouped by app and written as sentences, with blocklist and profile tags, lifetimes and on and off switches
Outbound Review: connections decided without asking, grouped by app (Slack, Google Chrome, Spotify and Node.js), each with allow and block controls
Outbound Network Monitor in 3D: a real globe from Apple Maps with this Mac in India and the places its apps reach, Hong Kong and Tokyo among them, above the app list, and an inspector explaining that Safari’s connection to ads.doubleclick.net in Dublin was blocked

Real Outbound windows, example connections.

Outbound sees every app that reaches the internet, including the ones you use every day

  • Chrome
  • Safari
  • Zoom
  • Spotify
  • Dropbox
  • Discord
  • Notion
  • Figma
  • Firefox
  • Telegram
  • WhatsApp
  • 1Password
  • Docker
  • Linear
  • Raycast
  • Obsidian
  • Claude
  • Steam

App names and marks belong to their owners. Shown to illustrate apps Outbound can filter, with no affiliation.

Everything in Outbound

What you get, at a glance

Lives in your menu bar.Speaks up when it matters.

A new connection asks first. Answer it once, and Outbound remembers. Everything it decided is a click away in the menu bar.

Features

The parts you will use every day

Each one is drawn here the way it looks on your Mac.

One clear question

When an app tries somewhere new, Outbound asks once: the app, the developer who signed it, where it is going and whether that server belongs to the app’s own developer.

Every app, helpers included

Background helpers fold into the app they belong to, so a browser with a dozen processes is one row.

Rules that read like sentences

Every rule says who, where, which port and for how long, and where it came from. Priority rules win over the rest.

Six lifetimes

Allow or deny once, for an hour, until the app quits, until logout or restart, or forever.

Stays on your Mac

Rules and history are stored locally. Crash reports and usage stats stay off unless you turn them on.

Three modes

Learn quietly, ask first, or block anything without a rule, and switch from the menu bar. After a few days in Learn, Outbound suggests switching to Ask.

Right now

Your apps talk to servers you never chose

Updaters, analytics, ad networks and crash reporters connect in the background all day. Outbound lists every one as it happens, so you can keep what you want and stop the rest.

6rule lifetimes
Once, for an hour, until quit, logout or restart, or forever.
200kentries per blocklist
Subscribe over HTTPS. A failed fetch keeps the last good list.
0accounts to create
No sign-up. Rules and history stay on your Mac.
ActivityExample · 1,284 seen today
An example feed of connections: Safari to www.apple.com allowed, Zoom to telemetry.zoom.us blocked, Chrome to accounts.google.com waiting for an answer, and more.

Coding agents

See where your coding agents send your code

An agent in your terminal can read your project and reach any server it likes. Outbound shows every place Claude Code, Codex or Cursor connects to and how much it sent, and can ask you before it reaches somewhere new.

Outbound Network Monitor with a 3D globe: Claude Code expanded to show *.anthropic.com and github.com allowed and ingest.quietcdn.dev blocked five times, Codex CLI and Cursor Agent below with the data each sent and received, and an inspector offering to allow or block ingest.quietcdn.dev for Claude Code
Real Outbound window, example connections: Claude Code reached Anthropic and GitHub, and one unknown host was blocked five times.

  • Every agent, by name

    Claude Code, Codex and Cursor show under their own name and icon, even when they run from a versioned folder or a bundled Node.

  • Every host, every byte

    Each place an agent reached, how often it was allowed or blocked, and how much it sent and received.

  • Somewhere new asks first

    In Ask mode, a host the agent has not used before waits for your answer. In Strict, it is blocked until you allow it.

  • Block one host, keep the agent

    Stop one destination for one agent in a click. Its model and GitHub keep working.

The AI Agents and Coding Tools filter lists them in one place, along with any app that talks to an AI service:

  • Claude Code
  • Codex
  • Cursor
  • Gemini CLI
  • GitHub Copilot
  • Aider
  • OpenCode
  • Goose
  • Cline
  • Kiro
  • Amp
  • Qwen Code

Outbound asks once, then remembers your answer

  1. 01Ask

    A question you can answer at a glance

    When an app connects somewhere new, Outbound asks once: the app’s real icon, the developer named from its Developer ID certificate, and the destination with its main domain in bold, so a look-alike stands out. It says when a server belongs to the app’s own developer, and when Outbound doesn’t recognise it.

    • Allow or deny for only this port, any port, or any port and protocol.
    • When the app ships an Internet Access Policy, the alert quotes the developer’s stated purpose and what happens if you deny.
    • Every waiting app in one queue. Answer all of an app’s requests at once.
    • The buttons arm after a moment, so a keystroke meant for another window never decides.
    Outbound’s question: Google Chrome wants to connect to accounts.google.com on port 443, with Once, 1 Hour, Until Quit and Forever, a countdown and Allow and Deny, next to the queue of waiting apps

  2. 02Remember

    Your answer becomes a rule you can read

    It says who, where, which port and for how long. Blocklists and your organization can add rules too, and each rule says where it came from.

    • Once, for an hour, until the app quits, until logout or forever.
    • Profiles for places like Home and Office, picked when you join a new network.
    • Big blocklists stay light: 80,000 hosts in about 2 MB of memory.
    Outbound Rules grouped by app, each written as a sentence such as Deny connections to ads.trackersrus.net on any port, with blocklist and profile tags

  3. 03Review

    What it decided without you waits in Review

    In Learn and Strict mode, or when a question times out, Outbound decides without asking you and keeps it for Review. Make it a rule, or dismiss it.

    • Grouped by app, newest first. Allow or block each one with a click.
    • Allow Verified Developers allows everything from verified developers in one step.
    • Learn never re-trusts a program whose code changed: it is asked about like a new one, and blocked if nobody answers.
    • After a few days in Learn, Outbound suggests reviewing what it saw and switching to Ask.
    Outbound Review: connections decided without asking, grouped by app, each with allow and block controls

A map of where your data goes

Arcs run from your Mac to each city your apps reach, on a flat map or a real 3D globe, and blocked destinations show in red. In the Network Monitor the map sits beside the list, or above it while the inspector explains one connection, and dragging across a traffic chart narrows both to that time window. Locations come from an offline database, so no lookup leaves your Mac.

Outbound Network Monitor in 3D: a real globe from Apple Maps with this Mac in India and the places its apps reach, Hong Kong and Tokyo among them, above the app list, and an inspector explaining that Safari’s connection to ads.doubleclick.net in Dublin was blocked

Map and globe

A flat map, or a real globe

The Network Monitor map has 2D and 3D, with Standard, Muted and Satellite styles. Turn on the floating globe in Settings › Labs and it stays on your desktop: resize it, hold it to move it, and pick a theme.

  • Connection pop-ups spring in, and packets glide along great-circle arcs.
  • The menu bar panel can show a flat map or a globe.
Outbound’s floating globe at two sizes: a dotted globe turned to Europe, Africa and Asia, with app icons at the places they connect to and green and red great-circle arcs between them
Outbound Network Monitor in 3D: the app list on the left and, beside it, a real globe from Apple Maps turned to Asia at night, with arcs from this Mac in India to the places its apps reach, Mumbai and Singapore among them
3D in the Network Monitor: a real globe from Apple Maps, with an arc from this Mac to each place your apps reach. Real Outbound window, example connections.
The same globe in five themes, left to right: Graphite, Blue Marble, Midnight, Daylight and Amber. On a phone, only the first two are shown.
Five themes
  • Graphite
  • Blue Marble
  • Midnight
  • Daylight
  • Amber

Labs

Make it yours.Seven switches in Settings › Labs.

Each one turns off on its own, and none of them changes what is allowed or blocked.

The top of your screen, alive

Notch island. When an app reaches a new country today, a capsule grows out of the notch with the route, then folds away. It can tell you about blocked connections too, at most once every eight seconds.

Live world in the menu bar. A tiny world beside the meter, with a thread to each place reached in the last few seconds.

World widget

Today’s routes on your desktop or in Notification Center, with what was allowed and blocked.

Outbound’s large World widget: Protected, 6 countries, Ask mode, flags for the United States, Germany, the United Kingdom, Japan, Singapore and Ireland, a dotted world map with routes from this Mac, and 60 allowed, 19 blocked, 207.5 MB received
  • Floating globeUses more
  • Live world in the menu barLight
  • Notch islandLight

Every switch shows its cost

Efficient keeps Outbound lightest. Showcase turns every experiment up and uses the most battery.

  • Live world in the menu bar panelA world map at the top of the panel, with a packet running along every route that is active now.
  • Live globe in the DockWhile the window is open, its Dock icon shows the globe with today’s routes, refreshed every 15 seconds.
  • Setup ends on a live worldThe last page of setup draws each of your first connections as it happens.

Each row says who connected, where and how much

Each row of the monitor answers the questions you would ask. When a connection closes, the filter records exactly how many bytes it sent and received, and the monitor shows them on each destination. More about the network monitor.

One row of Outbound Activity: Safari, 5 destinations, Apple software, a traffic sparkline, 16 allowed and 4 blocked, last seen 10 seconds ago, with block and allow switches; below it, www.apple.com on 443 TCP in Mumbai1The real appHelpers fold into the app they belong to.2Who signed itApple, a named developer, or nobody.3Traffic, last hourSent and received, sampled every 5 s.4Allowed and blockedCounts for the range you pick.5One clickBlock or allow, as a rule.6Every hostMain domain in bold.7Port and protocol443 · TCP, 53 · UDP.8Where it isFrom an offline database.9Last seenLive, to the second.
  1. The real app Helpers fold into the app they belong to.
  2. Who signed it Apple, a named developer, or nobody.
  3. Traffic, last hour Sent and received, sampled every 5 s.
  4. Allowed and blocked Counts for the range you pick.
  5. One click Block or allow, as a rule.
  6. Every host Main domain in bold.
  7. Port and protocol 443 · TCP, 53 · UDP.
  8. Where it is From an offline database.
  9. Last seen Live, to the second.

Intelligence

Ask about your network.You pick who answers.

Assistant answers questions about this Mac’s network in plain language, and Analytics opens with a short written overview. Every number in an answer is checked against your own figures; anything that doesn’t match is replaced by Outbound’s own summary.

Apple Intelligence

On this Mac. The default.

Answers are written on your Mac, so nothing you see in Analytics leaves it. A Mac without Apple Intelligence shows a plain summary instead.

Your coding agent

The subscription you already pay for. No API key.

Choose Claude Code, Codex, Grok, Cursor or another agent installed on this Mac. It reads Outbound’s figures through Outbound’s own tools and answers under your own sign-in.

Your own API key

OpenAI, Anthropic, Google Gemini, OpenRouter, or a local server.

Writes the Analytics overview with the model you choose, including Ollama or LM Studio on your own network. Your key stays in your keychain.

Your own agent, kept on a short leash

Outbound talks to the agent over the Agent Client Protocol, the open standard coding agents use with editors. It finds the agents installed on this Mac, and you turn one on in Settings › Intelligence.

  • It can use only Outbound’s tools: your apps, the sites and countries they reach, what was blocked, and your rules.
  • From Outbound it can’t read your files or run commands. It works in an empty folder of its own.
  • Any rule change it asks for waits for your approval.
  • If it needs you to sign in, Outbound says how. If it doesn’t answer, the Analytics overview falls back to Outbound’s own summary.
  • Claude Code
  • Codex
  • Grok
  • Cursor
  • Gemini CLI
  • GitHub Copilot
  • OpenCode
  • Factory Droid
  • Goose
  • Kimi CLI
  • Qwen Code
  • Kilo
  • Cline
  • Auggie
And any other agent that supports the Agent Client Protocol.

Your AI apps can ask. You decide.

Outbound includes a Model Context Protocol server, outboundctl mcp. Claude, Cursor, Codex, Gemini CLI and VS Code can ask about your apps, the sites and countries they reach, what was blocked and your rules. They see the same figures as Analytics, never the contents of a connection.

  • Each app has an Add Outbound to button in Settings › Intelligence.
  • An AI app can ask to add, remove, turn on or turn off a rule. Outbound shows you exactly what would change and makes the change only if you allow it.
  • You can switch rule changes off, so AI apps can only read.
Outbound asking about a change from an AI app: “Claude Code” wants to change a rule, Block a connection. The rule reads Deny connections to segment.io and its subdomains on any port for any app, with the AI app’s reason below it and Don’t Allow and Allow buttons

What stays on your Mac, and what goes only where you send it

Stays on your Mac

  • Your rules and connection history.
  • Answers from Apple Intelligence, and the check of their numbers.
  • Server locations, from a database stored on the Mac.

Goes only where you point it

  • Your questions and the figures your coding agent reads, to its company under your sign-in, once you turn it on.
  • Figures to the model behind your API key, after you turn on Send figures to it. Show What’s Sent… shows the exact request first.
  • The same figures as Analytics, and your rules, to AI apps you add.

Never sent

  • The contents of any connection.
  • To a model behind an API key: addresses, full host names, file paths or rules.
  • Anything at all, until you choose an AI and turn it on.

See the privacy policy for the details.

Also in the app

Smaller things you will notice

  • Highlights

    A privacy score with a daily streak, awards, a network passport of the countries your Mac has reached, and a Year in Review. Share cards are previewed before you share them. Nothing is shared automatically.

  • AI Agents in Analytics

    See which AI apps connect, which AI services they reach, and the countries those servers are in.

  • Smart filters

    Search tokens for AI apps, ad and tracking hosts, new apps, unsigned apps, Apple services, local network, abroad and heavy users.

  • Daily data limits per app

    Set a daily limit in the inspector. Outbound tells you at 80 % and at the limit, or blocks the app until midnight if you choose.

  • Official icons everywhere

    Apps, Apple services, command-line tools and websites show their real icons in one consistent rounded tile.

  • A command line in the app

    The outboundctl command ships inside Outbound: status, rules, ai ask and mcp.

Your rules and history stay on your Mac

Privacy

  • Rules and history stay localEverything Outbound records is stored on your Mac. Export it when you want a copy.
  • No account, nothing on by defaultAnonymous crash reports and usage stats stay off unless you turn them on. Website icons come straight from each site, and you can switch them off.
  • Locations without a lookupAn IP-location database you download once. Looking up where a server is never leaves your Mac.
  • Your DNS is left aloneOutbound is not a DNS proxy. Your DNS settings and your VPN stay exactly as they are.
  • A cloud model only if you add oneYour key stays in your keychain and nothing is sent until you turn on Send figures to it. Show What’s Sent… displays the exact request first.
  • An assistant that stays on your MacOn a Mac with Apple Intelligence, ask about your network in plain language. Answers show the records they used as charts, a timeline or a map, with follow-up questions to try. Nothing leaves the Mac.
How Outbound handles data ›

Safety

  • Apple’s own software, trusted safelyMatched by Apple’s signature and by where macOS keeps it, so a copied Apple tool is still asked about.
  • Questions never hang the networkAn unanswered question is allowed after 8 seconds for UDP or 60 for TCP by default, then kept for Review.
  • Every rule can be undoneRules expire when you say, and your previous rule store is kept when you import new rules.
  • Help when the network stopsHelp › Network Not Working? shows Outbound’s state with Pause for 15 Minutes and Turn Off, and the blocks of the last 30 minutes with one-click Allow.
How Outbound is built ›

Compared

What the macOS firewall leaves to you

The firewall built into macOS handles incoming connections. Outbound decides where your apps can connect out.

CapabilitymacOS firewallOutbound
Incoming connectionsBuilt into macOSRules include direction
Outgoing rules per app and hostNot its purposeApp, host, domain, address, port
Asks when an app connects out somewhere newAsks about incoming connections onlyLearn, Ask or Strict
Shows where each app connectsPer-app totals only, in Activity MonitorActivity, map and traffic per app
Managed deploymentApple firewall payloadMDM profiles, rule feed, audit export

Apple describes its firewall in Firewall settings. See every feature ›

Coming from another firewall?

Dated comparisons from public sources, including where the other app is the better choice.

Outbound vs Little SnitchRules, monitor and price, side by side.Read the comparisonOutbound vs LuLuWhat a free, open-source firewall covers, and what it does not.Read the comparisonOutbound vs Radio SilenceA simpler blocker next to rules with a monitor.Read the comparison

Pricing

Pay once, and the first 50 licences are $29

One-time licences: Personal covers 2 Macs, Family covers 5. After the first 50, the personal licence is $39.

Personal

Founding price

$29$39USD
one time

For the first 50 licences. Then $39.

  • 2 Macs
  • Per-app and per-host rules
  • Network monitor, map and Review
  • Profiles and blocklists
  • Command-line control
  • All 1.x and 2.x updates

Family

5 Macs

$59USD
one time

One licence for the Macs at home.

  • Everything in Personal
  • For the Macs in your household
  • All 1.x and 2.x updates
  • No subscription

Teams

Per seat

Let’s talk

Billed yearly, for the Macs you manage.

  • MDM configuration profiles
  • Managed rule feed over HTTPS
  • Optional SHA-256 pinning
  • JSON Lines audit export for SIEM
Contact us
  • Key by emailYour licence key arrives right after checkout.
  • Pay onceNo subscription and no account.
  • Updates includedEvery 1.x and 2.x release.
  • Clear checkoutTaxes and the total shown before you pay.

Not for you? Get a full refund within 14 days. Checkout is run by Dodo Payments, the merchant of record. Questions before buying? Email support.

For the Macs you manage

Manage every Mac from one policy

Deploy with MDM profiles. Deliver rules over HTTPS with an optional SHA-256 pin. Lock the mode, and collect JSON Lines audit logs with the tools you already use.

Outbound for IT ›
outboundctl — zsh — 96×18
outboundctl explain --app us.zoom.xos --host telemetry.zoom.us --port 443
Decision: deny
Decided by: rule 6F1C2A9E-3B7D-4E21-9A40-2C5D8B1E7F03
Matching rules (1):
  Decides 6F1C2A9E-3B7D-4E21-9A40-2C5D8B1E7F03  Deny connections to telemetry.zoom.us on any port for us.zoom.xos [user]
outboundctl rules count
11

Example session. Same output format as the real command.

Questions people ask first

Read the full FAQ ›

Does the built-in macOS firewall block outgoing connections?

Apple’s firewall settings control incoming connections. Outbound filters outgoing connections per app and destination. The two serve different purposes.

Can I see what Claude Code, Codex or Cursor connect to?

Yes. Coding agents are apps like any other to Outbound. Each one shows under its own name and icon, even when it runs from a versioned folder or a bundled Node, with every host it reached and the bytes it sent there. In Ask mode a new destination asks you first, and a rule can block one agent from one host while the rest keep working. The AI Agents and Coding Tools filter lists every AI app and anything that talks to an AI service.

Is there a free trial?

No. You pay once and get a licence key by email; the download is the full app, and it opens with that key. If you do not like Outbound, you get a full refund within 14 days of purchase.

How much does Outbound cost?

A personal licence is $39 USD one time, and the first 50 licences are $29 and includes all 1.x and 2.x updates. A family licence is $59 USD for 5 Macs. A personal licence covers 2 Macs. There is no trial, but if you do not like Outbound you get a full refund within 14 days of purchase.

What happens when I don’t answer an alert?

In Ask mode, unanswered connections are allowed after 8 seconds for UDP or 60 seconds for TCP by default, then added to Review. You can change the wait (15–120 seconds for TCP) or have unanswered connections blocked. Strict mode blocks connections that have no matching rule.

Does Outbound collect analytics?

Not unless you ask it to. Anonymous crash reports and usage stats are off by default; you can turn them on in Settings. Rules, settings and audit logs are stored on your Mac. The app fetches blocklists you add and, on managed Macs, the rule feed your administrator sets. If you add a cloud model for the Analytics overview, it receives figures only after you turn on Send figures to it. Administrators can export audit logs to a chosen destination.

Which Macs does Outbound require?

Outbound requires macOS 14 or later on Apple silicon or Intel. This is the minimum requirement, not a claim that every macOS build, VPN or Private Relay configuration has been tested.

Can I allow an app but block some of its hosts?

Yes. Outbound rules combine an app with a host, domain, IP address, network range or local network, plus ports and protocol. A domain rule also covers its subdomains. Hostnames are shown when the app connected by name; otherwise Outbound shows an address.

Outbound app icon

Be one of the first 50

Outbound is $29 for the first 50 licences, then $39. Pay once, use it on 2 Macs.

Buy OutboundSee pricing
  • 2 Macs per licence
  • One-time, no subscription
  • Full refund within 14 days
  • macOS 14 or later
$29first 50 licencesBuy now