Hybrid firewall for macOS

Secure your Mac

Scudo is a hybrid firewall for macOS that combines an inbound network-layer packet filter with an outbound application-layer firewall.
Scudo helps protecting your Mac’s network services from unwanted connections from remote computers and improves your privacy and security controlling all apps network activities, allowing you to choose which app is allowed to connect to the network.
Everything is controlled in a single window, its usage is really simple and safe. A detailed PDF manual is included in the package.

Easy to install and start

Protect your shared documents and network services

Protect your privacy blocking apps

Popup notifications: define inbound and outbound rules on the fly

Limit upload or download bandwidth

Protect your network from well-known dangerous hosts using on-line blacklists

Monitor connections and runtime rules


Scudo 1.0 PUBLIC BETA 10

Scudo requires macOS 10.12 Sierra, 10.13 High Sierra, 10.14 Mojave or 10.15 Catalina.
Scudo is signed.


This is a beta release. Please report bugs to, thank you.


This release of Scudo has been tested on macOS 10.13, 10.14 and 10.15.

Scudo is an alternative to both Murus and Vallum. If you are a Vallum user you must uninstall Vallum using the correct Vallum uninstaller found in Vallum DMG before installing Scudo. If you are a Murus user you must uninstall Murus Boot Scripts before running Scudo.