# Best security & privacy apps for Mac

> Firewalls, key managers and watchdogs that keep your Mac yours. 7 native apps, hand-picked by MacWorthy. Facts checked 2026-10-19.

Editor's picks: Little Snitch.

## Compared

| App | Price | Mac App Store | Homebrew | Open source |
| --- | --- | --- | --- | --- |
| [Little Snitch](https://macworthy.com/apps/little-snitch/) | One-time purchase | No | `little-snitch` | No |
| [LuLu](https://macworthy.com/apps/lulu/) | Open source | No | `lulu` | GPL-3.0 |
| [OverSight](https://macworthy.com/apps/oversight/) | Open source | No | `oversight` | GPL-3.0 |
| [KnockKnock](https://macworthy.com/apps/knockknock/) | Open source | No | `knockknock` | GPL-3.0 |
| [Secretive](https://macworthy.com/apps/secretive/) | Open source | No | `secretive` | MIT |
| [Strongbox](https://macworthy.com/apps/strongbox/) | Free + Pro | Yes | No | No |
| [Tailscale](https://macworthy.com/apps/tailscale/) | Free + Pro | Yes | `tailscale-app` | No |

## The apps

- **[Little Snitch](https://macworthy.com/apps/little-snitch.md)** (editor's pick): See and control every network connection. Little Snitch alerts you when apps phone home, lets you allow or deny each connection and maps where your data travels.
- **[LuLu](https://macworthy.com/apps/lulu.md)**: The free, open-source outbound firewall. LuLu blocks unknown outgoing connections until you approve them. Simple, free and from respected Mac security researchers.
- **[OverSight](https://macworthy.com/apps/oversight.md)**: Know when your mic and camera turn on. OverSight alerts you whenever the microphone or webcam activates, and tells you which process did it.
- **[KnockKnock](https://macworthy.com/apps/knockknock.md)**: See what's persistently installed. KnockKnock lists launch agents, extensions and login items so you can spot software that starts itself.
- **[Secretive](https://macworthy.com/apps/secretive.md)**: SSH keys that never leave the Secure Enclave. Secretive stores SSH keys in the Secure Enclave and asks for Touch ID before each use, so keys can't be copied off your Mac.
- **[Strongbox](https://macworthy.com/apps/strongbox.md)**: KeePass and Password Safe, made native. Strongbox opens your KeePass databases with Touch ID, AutoFill and syncing through the cloud storage you already use.
- **[Tailscale](https://macworthy.com/apps/tailscale.md)**: A private network for all your devices. Tailscale connects your Macs, servers and phones over WireGuard with zero configuration, as if they were on one LAN.

HTML version: https://macworthy.com/categories/privacy/