Firewall Scudo 3.0.4 — macOS

If you already use a tool like Little Snitch or LuLu to keep an eye on network traffic, Firewall Scudo works in a similar way but aims to be simpler. It's a hybrid firewall for macOS, handling both incoming and outgoing connections. The developer describes it as a more straightforward alternative to Murus and Vallum, which are also his apps.

See who's knocking

When a remote computer tries to reach a service on your Mac, Scudo pops up a notification. You decide whether to allow or block that access. It's a clear, direct way to handle inbound requests without digging through logs.

Control what leaves your Mac

Outgoing traffic is filtered at the application level. The first time an app tries to connect, you get a notification and can set a rule that's either temporary or permanent. Rules can match IP addresses, ranges, hostnames, or domains, so you have enough flexibility for most setups.

Set up custom rules

Scudo includes a built-in library of service rules for common network services, and you can also create your own custom rules. The app is fully sandboxed, which is good for keeping its own behavior contained. For someone who wants basic firewall control without a steep learning curve, this fits the bill.

One working session with Scudo

I had Scudo running in the background for a typical afternoon of office work. A few minutes after starting up, a notification appeared about an app I had forgotten about — a small utility that had never shown itself before. The dialog listed the app name, the remote address it was trying to reach, and whether it was inbound or outbound. I chose to block it temporarily, just to see what happened. Nothing broke; the utility simply went quiet. Later that same session, I made the rule permanent.

An inbound notification came up when a colleague on the same network tried to reach a shared folder. The notification identified the remote IP and the local service being accessed. I allowed it for that session, and Scudo remembered the rule for the next time. No digging into system preferences. The menu bar icon let me see the current rule count and switch profiles without opening the main window.

Settings I'd change first

After the first few notifications, I opened Scudo's main window and looked at a few defaults worth reconsidering:

• Location awareness — turned this on right away. It blocks inbound connections when your Mac joins an untrusted Wi‑Fi network, like a coffee shop hotspot. You set a list of trusted networks, and Scudo handles the rest.
• Global block list — added a handful of known tracker domains and a few IP ranges I recognized from past firewall logs. This list applies to every app, so it cuts down on individual rules for common destinations.
• Configuration profiles — set up two profiles: one for the office network, another for home. Switching between them is a single click from the menu bar. The office profile allows inbound file sharing services; the home profile is stricter.

These few adjustments took maybe five minutes and made the daily notifications more relevant. Everything else stayed at its default, and Scudo settled into the background as it should. Firewall Scudo for Mac cracked offers no protection, whereas the genuine version blocks threats and suits privacy-focused users.

• Official release notes list Scudo 3.0.4.

• macOS 11.3 or later
• Intel or Apple Silicon