Vallum

macOS Application Firewall

Advanced appfirewall for macOS


Vallum offers a new way to protect your privacy and to increase your Mac’s security. Vallum is based on the new macOS System Extensions API and runs natively on all Apple computers. Vallum is fast, light and easy to use.

online help


Inbound filtering and popup alerts for inbound connections

Match connections by hostname or domain

Fully customizable inbound and outbound rulesets

Optimize your rules using groups, apps groups or matching apps by signature type or by developer

Rules conditions based on current network settings like SSID and interface

Powerful rules editor

Improved popup notifications

No kernel extensions, everything runs in userland using app extensions

Purchase Vallum

Secure ordering through Fastspring service worldwide. Prices do not include VAT. PayPal or credit cards accepted.

Try before you buy! You can evaluate Vallum trial for an unlimited period of time.

BUNDLES

DOWNLOAD VALLUM


Vallum 5.0

Now compatible with macOS 15 Sequoia.

Vallum 5 requires macOS 11.2 Big Sur or later.
Old Vallum versions for macOS 10 are available here


FEATURES

Simple interface
Drag and drop apps or folders icons from the macOS Finder to Vallum in order to block them. Rules are immediately active, and are persistent across system restarts. Vallum Simulator allows you to test your ruleset very easily.

Inbound and Outbound filtering
Vallum intercepts both inbound and outbound apps connections. It means you will be notified when an app on your Mac will try to connect to the network, and when a remote host is trying to connect to a service running on your Mac.

Powerful rule editor
Vallum rules are defined by several parameters including source, destination, hostname, port, protocol, user ID and many others. Rules can be persistent or set to expire at a specific time or event. Rules can be matched by a single apps/process (by fingerprint or by path) or by more apps based on path, signature, origin, developer. Vallum rules are inspired by pf, the macOS packet filter, they share the same matching logic and a very similar syntax.

Flows Monitor
Vallum Flows Monitor displays all inbound and outbound connections by apps and system processes and allows you to monitor traffic and drop/block connections on the fly

Location aware ruleset
Each rule can be set to be effective only when the Mac is connected to or disconnected from a specific WiFi hotspot or if one or more network interfaces are actually active or inactive. So one single ruleset can be used for all network locations. For example, using a single rule you can tell Vallum to always block all inbound connections when you are not connected to your home WiFi hotspot.

Rule by Developer ID
Developer ID is used to identify a macOS developer or company. For example Google, Adobe and all major developers use the same Developer ID for all their apps. With Vallum you can create rules that applies to all apps signed by a specific developer. For example using a single rule you can tell Vallum to always pass all connections by Microsoft apps.

Light and energy-efficient
Vallum and its components make an efficient use of your Mac’s system resources. On Apple Silicon Macs most tasks run on the CPU efficiency cores in order to keep a very low impact on your MacBook battery.

Privacy
Vallum respects your privacy. None of your personal/system data is collected or leaked. Vallum does not “phone home” and does nothing in order to monitor its usage. Vallum itself is subject to its own rules. When Vallum attempts a connection to check for updates you will see a notification and you will be able to block it.

Easy install/uninstall, free support
Vallum install is very easy: simply copy Vallum app to your Mac’s Application folder then run it. To uninstall Vallum you just need to quit it then trash it. Simple as that.
Free support is available for all Vallum users directly from the developers.

This site does not use cookies and does not collect any personal data. Learn More