Submit

LuLu 4.5.3

Security & Privacy

LuLu

v4.5.3, released this week

A free, open-source firewall for outgoing connections.

FreeOpen sourceFree and open source under the GPL-3.0.macOSUpdated 7 days ago

By Objective-See
Get LuLu
Rate LuLu
No ratings yet

LuLu screenshot 1
LuLu screenshot 2
LuLu screenshot 3

About

LuLu blocks outgoing network connections by default and asks about anything new, which is the gap macOS's own firewall leaves open. Rules are per app or per signature, and it shows what is trying to reach out along with where it is going. It is free, open source, and made by a long-standing Mac security developer.

Price
Free, Free and open source under the GPL-3.0.
License
GPL-3.0
Version
4.5.3 · Oct 20, 2026
Platforms
macOS

Featured badge

Make LuLu yours: show the badge on its site and the listing marks itself as linked back.

Featured on MacGrove badge for LuLu
HTML
<a href="https://macgrove.app/apps/lulu"> <img src="https://macgrove.app/badge/lulu.svg" alt="Featured on MacGrove" width="224" height="32" /> </a>
Markdown
[![Featured on MacGrove](https://macgrove.app/badge/lulu.svg)](https://macgrove.app/apps/lulu)

What’s new

All 22 releases

4.5.3Latest · 7 days ago

🆕 You can now sponsor LuLu/Objective-See Foundation:

[](https://github.com/sponsors/objective-see)

☑️ Connections to 0.0.0.0 / :: are now treated as localhost macOS rewrites these to the loopback address, so such traffic never leaves the machine. With "Allow Localhost Traffic" enabled, these connections are now allowed instead of triggering alerts (or in some cases, failing).

🔐 Disk Image Hash (SHA256): LuLu_4.5.3.dmg: E50625191B5F9FEDD56C545F2D630993470DBBA0BC12D85B737372C79CC91AFF

Earlier

  • 4.5.2🆕 You can now sponsor LuLu/Objective-See Foundation:

    🆕 You can now sponsor LuLu/Objective-See Foundation:

    [](https://github.com/sponsors/objective-see)

    ☑️ Native Liquid Glass UI (macOS 26+) Connection alerts, dialogs, and the startup/update/about windows now use native glass (thanks @32r7ue, #934).

    ☑️ Improved extension memory growth Alerts that could never be answered (e.g. the app went away mid-delivery) left flows paused and held forever; these are now cleaned up.

    ☑️ Improved handling of delegated flows Flows created on behalf of an app by a system process (e.g. mDNSResponder) are now evaluated as that app, instead of being denied once the app exits.

    ☑️ No more duplicate rules Answering two alerts for the same item no longer creates two identical rules.

    ☑️ "Move to /Applications" on launch If launched from elsewhere (e.g. ~/Downloads), LuLu now offers to move itself to /Applications and relaunch.

    ☑️ Greek localization Thanks @Camthalion77.

    🔐 Disk Image Hash (SHA256): LuLu_4.5.2.dmg: 9C6D2F8B24E75424F8B3A595C0166C59B40660B6DF1B2FB5C101FBA5F86B5D69

  • 4.5.1🆕 You can now sponsor LuLu/Objective-See Foundation:

    🆕 You can now sponsor LuLu/Objective-See Foundation:

    [](https://github.com/sponsors/objective-see)

    ☑️ Improved 'Add Rules' window logic Better handing of deleted/invalid rules.

    ☑️ Improved startup New checkin logic to handle upgrade cases better.

    🔐 Disk Image Hash (SHA256): LuLu_4.5.1.dmg: 98F4D3427F4C6FCCF9680FED22879BE90A5AE81E80EB8616C1D758755B6BB624

  • 4.5.0🆕 You can now sponsor LuLu/Objective-See Foundation:

    🆕 You can now sponsor LuLu/Objective-See Foundation:

    [](https://github.com/sponsors/objective-see)

    ☑️ New: Rule option for "Process + Kids" If selected a rule will be created that will subsequently apply to the process, and any children of it.

    ☑️ Improved handling of "No client" Now, when no user client is present, new rules are created, but will show up in "Passively created rules" in UI.

    ☑️ Rule matching order improved (e.g. DNS for Apple Programs)

    ☑️ Alert now remember previous choices ☑️ UI improvements (Rules window live refresh, etc.) ☑️ Alert now more likely to show domain (macOS 11, via flow.remoteHostname)

    ☑️ Improved localizations ☑️ Improved logic around importing rules ☑️ Improved handling of Simulator apps ☑️ Improved handling of glob and CIDR rules ☑️ Improved handling of Regex rules (are now anchored).

    🔐 Disk Image Hash (SHA256): LuLu_4.5.0.dmg: 33B624CCF3640D2708993885E2AE7A266C3EC4EE0C3784DC9036E95368664CB1

Source
GitHub releases
Last checked

Similar apps