evilsocket/opensnitch

Health v2 · maintenance only

Adoption not part of the score

14009 stars · 657 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch, intercepting and filtering outbound connections per application. It includes a GUI for managing rules, blocking ads/trackers/malware domains system-wide, configuring nftables, and managing multiple nodes centrally.

Use cases

• block an app from phoning home on linux
• interactive outbound connection firewall like little snitch
• block ads and trackers system wide
• monitor which applications make network connections
• manage firewall rules across multiple linux machines
• integrate application firewall events into a SIEM

When to choose

• you run GNU/Linux and want per-application outbound traffic control with prompts
• you want a GUI to manage nftables and blocklists system-wide
• you need centralized management of firewall rules across several hosts

When to avoid

• you need a firewall on macOS or Windows
• you only need simple inbound port filtering without application awareness
• you cannot run a daemon with root privileges

Facets

application · maturity active

security networking monitoring gui security networking privacy developer-tools self-hosted application-firewall outbound-filtering little-snitch-alternative nftables interactive-firewall linux desktop

Member repositories

For agents

markdown · JSON · MCP: product_card(name="evilsocket/opensnitch")