Outbound connection firewall

Know what connects. Decide once.

See the app, destination, and traffic behind every outbound connection—then allow or block without breaking your flow.

  • Open source AGPL-3.0
  • Local by default
  • macOS 14+

SHIELDXY AT A GLANCE

Answers you can act on

Product type
Native macOS application firewall
Primary job
Monitor and control outbound connections
Evidence shown
Process, destination, state, sent and received bytes
Control surfaces
Main window, menu bar, rules, and settings
Availability
Launch list open; checkout not available

COMPARE IN 30 SECONDS

Shieldxy, LuLu, or Little Snitch?

Three credible choices. Different jobs, licenses, and levels of control.

Swipe to compare →

Feature and license comparison of Shieldxy, LuLu, and Little Snitch
What matters ShieldxyRockxy TeamOpen source · preview LuLuObjective-See Little SnitchObjective Development
Source license AGPL-3.0 GPL-3.0 Commercial license
Best fit Fast process-to-destination triage Free, auditable outbound firewall Mature monitoring and rule depth
Connection context Process, bundle ID, destination, state, bytes, endpoint map Process, destination, signing context, network monitor App, server, port, protocol, volume, history, global map
Rule workflow Verify context, then allow or block locally Alert-driven process or endpoint rules Granular rules, profiles, blocklists, and CLI
Availability Launch list open; not yet for sale Free download Paid app with free trial

Comparison reflects publicly documented product capabilities as of July 2026. Shieldxy details describe the current launch preview.

PROCESS-LEVEL VISIBILITY

Find the process before digging through logs

Process, bundle ID, destination, transfer totals, and connection state stay in one view. Start with evidence, not guesses.

  • Filter processes and destinations from one search field
  • Review active state and bytes sent or received
  • Inspect app helpers, system processes, browsers, and developer tools
Shieldxy process view shown in a diagonal light and dark theme comparison

GEOGRAPHIC ENDPOINT MAP

See where traffic goes without reading a wall of IPs

Map remote endpoints, spot an unexpected region, then jump back to the process behind it.

Shieldxy map view shown in a diagonal light and dark theme comparison

MAC-NATIVE CONTROL SURFACES

Control traffic without living in a dashboard

Investigate in the app. Check traffic and protection from the menu bar. Get back to work.

Shieldxy main window and menu bar traffic controls running together on a Mac desktop

MENU BAR

Traffic rate and firewall actions at a glance

Review live upload and download rates, start protection, switch connection mode, reload rules, and open rules or history.

Shieldxy menu bar popover with live transfer graph and protection controls

PROTECTION SETTINGS

Know which extension is installed and which rules act automatically

See protection status, open System Settings, review the provider identifier, set startup behavior, and control automatic handling for Apple system binaries.

Shieldxy protection settings showing Network Extension status and automatic rules

LESS TIME HUNTING

From mystery traffic to a support-ready answer

Debug faster

Trace the connection before opening logs or packet captures

Start with the process, destination, state, and traffic volume.

AI tools

See when ChatGPT, Claude, Cursor, and their helpers connect

Shieldxy shows connection metadata, not prompts or payloads.

Support handoff

Put concrete network evidence in the ticket

Share the app, bundle ID, destination, state, bytes, and time window.

Act once

Turn confirmed noise into a clear rule

Allow it, block it, and move on.

HOW IT WORKS

See it. Verify it. Decide.

  1. 1

    Enable protection

    Install the Network Extension and confirm its status.

  2. 2

    Trace the process

    Review its destinations, state, and traffic volume.

  3. 3

    Make the call

    Allow, block, or keep investigating.

LOCAL-FIRST BOUNDARY

Connection review belongs on the Mac generating the traffic

Shieldxy is designed around an on-device macOS Network Extension and native control surfaces. Processes, destinations, rules, history, and protection settings do not require a web dashboard.

SHIELDXY VS. ROCKXY

Firewall decisions and HTTP debugging are different jobs

Use Shieldxy to monitor and control outbound application connections. Use Rockxy when you need to capture, inspect, replay, diff, redact, or share HTTP debugging evidence.

EARLY BIRD PRICING PREVIEW

Early Bird prices, with the final price in plain sight

One-time purchase. No subscription. Checkout is not open yet; these planned launch prices may change before sales begin.

No payment today
EARLY BIRD

Personal

1 Mac

Early Bird

$12

Final price

$28

Save $16· one time

One macOS activation with 12 months of updates and support.

LIFETIME UPDATES

Lifetime

2 Macs

Early Bird

$38

Final price

$68

Save $30· one time

Two macOS activations with lifetime app updates and 12 months of support.

No checkout today. Prices shown are planned launch targets. Joining the list does not reserve a license or guarantee the offer.

PRELAUNCH POLICY

Launch terms, in plain sight.

No checkout yet. Four things to know.

AGPL-3.0 stays explicit

AGPL-3.0 source. The paid offer covers signed builds, activations, updates, and support.

Interest, not an order

No charge, product account, license reservation, or price lock.

One or two Mac activations

Personal: 1 Mac. Multi-Mac and Lifetime: 2 Macs.

The included period is visible

Personal and Multi-Mac: 12 months of updates and support. Lifetime: lifetime app updates and 12 months of support.

Full checkout, activation, privacy, EULA, refund, and renewal terms appear before payment.

PRODUCT Q&A

What people ask.

Product, pricing, privacy, and support.

Is Shieldxy open source, and what does the paid offer cover?

Yes. The source is licensed under AGPL-3.0. The planned paid offer covers signed builds, Mac activations, app updates, and support; it does not remove AGPL rights.

Which Macs does Shieldxy support?

The current target is macOS 14 or later on Apple silicon and Intel Macs. Shieldxy uses Apple’s Network Extension and requires the system permission needed to filter network traffic.

Does Shieldxy send connection data to the cloud?

Firewall processing, connection review, rules, and history are designed to stay on the Mac. Shieldxy does not claim cloud traffic analysis. You choose if and when to share evidence with support.

Does Shieldxy show connections from ChatGPT, Claude, Cursor, and other AI tools?

It treats AI tools like other Mac processes and can show process, bundle ID, destination, transfer totals, and connection state. The current preview does not claim to read prompts or payloads.

Can I buy Shieldxy now, and are the prices locked?

Not yet. Early Bird targets are $12, $18, and $38; planned Final prices are $28, $38, and $68. Joining the list does not charge you, reserve a license, or lock a price.

Is there a subscription or automatic renewal?

The current offer is planned as a one-time purchase, not a subscription. Any optional update or support renewal terms will be published before checkout; the launch list cannot start a renewal.

Should I choose Shieldxy, LuLu, or Little Snitch?

Choose LuLu for a free, open-source firewall baseline. Choose Little Snitch for mature commercial monitoring and deep rule tooling. Consider Shieldxy for fast process-to-destination context before making a rule. Shieldxy is still a launch-list preview.

What should I capture before opening a network support ticket?

Capture the app or process, bundle ID, destination, connection state, sent and received bytes, and the time window. That gives support a concrete starting point without requiring prompt or payload content.

Make outbound traffic explain itself.

Join the Shieldxy launch list for availability updates. No checkout, payment, or product account is created today.

Join Shieldxy early bird