Little Snitch vs NetMute

If you are weighing a Little Snitch alternative, the real question is how much you want to decide yourself.

Little Snitch (Objective Development, Vienna; version 6.5 from 8 September 2026) is built around your decisions. It asks about new connections, or records them silently for you to review later, and turns each answer into a rule you can make as precise as port, protocol and direction. On top of that it offers encrypted DNS, a Network Monitor with up to twelve months of traffic history, blocklists you choose by topic, and profiles that switch automatically per network.

NetMute is built around the question most people actually have: which of my apps send data to trackers, and how do I stop it? Tracker Shield blocks known tracker domains without a prompt per connection, and App X-Ray gives each app a privacy grade from what it actually contacts. You get an answer on day one, before you have written a single rule.

Where Little Snitch is the better pick. If you want to see every connection and decide each one yourself, write rules by port, protocol and direction, or encrypt your Mac's DNS lookups (DoH, DoT, DoQ), Little Snitch does exactly that and has more than 20 years of development behind it. NetMute is newer, has less accumulated mileage, and is closed source.

Where NetMute is the easier answer.

• Trackers without homework. Tracker Shield blocks 300+ curated tracker domains in apps and in browsers. In browsers that resolve names on their own (such as Brave), name-based blocking needs one extra setting, and the app's "Where NetMute protects" check measures where blocking works. Little Snitch can block trackers too, through blocklists you pick and switch on yourself.
• A privacy grade per app. App X-Ray grades every app from what it actually contacts, so you see at a glance which one deserves a closer look.
• Decide later, in one pass. Quiet Mode records new connections instead of popping them up. You decide the whole backlog in one go, grouped by app, and every block becomes a visible rule.
• Rules you can check. Every rule shows how often it fired, and rules that provably cannot fire are named.
• Data limits per app. Pro sets data limits per app, optionally only on a hotspot, which Little Snitch does not offer. "On the go" applies automatically when you join a hotspot, pauses the apps you chose and keeps a data budget; everything goes back when you leave.

A real example from the developer's own Mac (7 to 22 September 2026): GeForce NOW contacted 59 domains, two of them tracking endpoints (feedbacks.telemetry.data.nvidia.com and events.telemetry.data.nvidia.com). NetMute blocked both, without a single prompt. Over 30 days the same Mac had 2,701 tracker requests stopped, from 64 companies across 33 apps.

Little Snitch is a perpetual licence, sold directly on obdev.at and not in the Mac App Store: single, family (up to five Macs in one household, non-commercial) and multi licences, reduced upgrade pricing for new major versions, and a student discount. The demo has full protection, switches the filter off every three hours and can be restarted as often as you like. Little Snitch Mini is a separate Mac App Store app: its monitor is free, blocking needs a monthly or yearly subscription.

NetMute is free to download with no time limit: per-app firewall, live traffic per app, Tracker Shield for the 50 most active tracker domains and five custom domain blocks. Pro is a one-time purchase that includes all updates within the major version: no subscription, no account. Get it from the Mac App Store (Pro as an in-app purchase) or as a direct download with a licence key, which also offers team licences for 5 or 10 Macs and a proper invoice with VAT ID.