# Privacy first

> Firewalls, watchdogs and on-device tools that keep your data where it belongs. 8 native Mac apps, hand-picked by MacWorthy. Facts checked 2026-10-19.

## Compared

| App | Price | Mac App Store | Homebrew | Open source |
| --- | --- | --- | --- | --- |
| [Little Snitch](https://macworthy.com/apps/little-snitch/) | One-time purchase | No | `little-snitch` | No |
| [LuLu](https://macworthy.com/apps/lulu/) | Open source | No | `lulu` | GPL-3.0 |
| [OverSight](https://macworthy.com/apps/oversight/) | Open source | No | `oversight` | GPL-3.0 |
| [KnockKnock](https://macworthy.com/apps/knockknock/) | Open source | No | `knockknock` | GPL-3.0 |
| [Secretive](https://macworthy.com/apps/secretive/) | Open source | No | `secretive` | MIT |
| [Strongbox](https://macworthy.com/apps/strongbox/) | Free + Pro | Yes | No | No |
| [MacWhisper](https://macworthy.com/apps/macwhisper/) | Free + Pro | No | `macwhisper` | No |
| [MoneyMoney](https://macworthy.com/apps/moneymoney/) | One-time purchase | No | `moneymoney` | No |

## The apps

- **[Little Snitch](https://macworthy.com/apps/little-snitch.md)** (editor's pick): See and control every network connection. Little Snitch alerts you when apps phone home, lets you allow or deny each connection and maps where your data travels.
- **[LuLu](https://macworthy.com/apps/lulu.md)**: The free, open-source outbound firewall. LuLu blocks unknown outgoing connections until you approve them. Simple, free and from respected Mac security researchers.
- **[OverSight](https://macworthy.com/apps/oversight.md)**: Know when your mic and camera turn on. OverSight alerts you whenever the microphone or webcam activates, and tells you which process did it.
- **[KnockKnock](https://macworthy.com/apps/knockknock.md)**: See what's persistently installed. KnockKnock lists launch agents, extensions and login items so you can spot software that starts itself.
- **[Secretive](https://macworthy.com/apps/secretive.md)**: SSH keys that never leave the Secure Enclave. Secretive stores SSH keys in the Secure Enclave and asks for Touch ID before each use, so keys can't be copied off your Mac.
- **[Strongbox](https://macworthy.com/apps/strongbox.md)**: KeePass and Password Safe, made native. Strongbox opens your KeePass databases with Touch ID, AutoFill and syncing through the cloud storage you already use.
- **[MacWhisper](https://macworthy.com/apps/macwhisper.md)** (editor's pick): Accurate transcription that stays on your Mac. MacWhisper runs Whisper models locally to transcribe recordings, meetings and podcasts, then exports subtitles and text.
- **[MoneyMoney](https://macworthy.com/apps/moneymoney.md)**: Online banking, done locally. MoneyMoney talks to your banks directly, keeps transactions on your Mac and adds rules, reports and budgets on top.

HTML version: https://macworthy.com/collections/privacy-first/