Mac outbound firewall with per-app, per-host rules
Free, open-source plugin that swaps secrets and personal data for placeholders before AI models see them
Stage
Not given
Not given
Founded
Not given
Not given
Based in
Not given
DE
Pricing model
Paid
Open source
Pricing
Personal: $39 USD one time for 2 Macs (first 50 licences: $29). Family: $59 USD one time for 5 Macs. Teams: by quote, per seat yearly. All plans include 1.x and 2.x updates.
Not given
Key features
Per-app and per-host rules with customizable ports and protocols
Network monitor showing connections on flat map or 3D globe
Three modes: Learn, Ask, and Strict
Profiles for different network environments
Blocklists with up to 2 million entries
Tracking report by app or company
Data limits and speed limits per app
Command-line tool outboundctl
AI Assistant with on-Mac questions
Detects email addresses, phone numbers, API tokens, private keys, and passwords
Replaces secrets with placeholders before reaching the model
Runs entirely on your local machine with no telemetry or servers
Protects PDFs, images, and SSH keys
Uses fixed detection rules instead of language models
Supports custom detection rules
Highest precision detection on benchmark datasets
Optional NER service for finding names in text
What makes it different
One-time purchase with no subscription, covers multiple Macs
Private by design with all data stored on your Mac
Full refund within 14 days with no trial needed
Built on Apple's Network Extension API without kernel extension
Detailed visibility into AI agent and coding tool connections
Highest precision with lowest false positive rate across all tested datasets
Preserves code readability by not masking commit hashes, IDs, and file names
Outbound
maisecrets