# Firewalls privacy ratings

Firewalls that control which apps connect to the internet.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [Lockdown](https://privacyratings.com/firewalls/lockdown/) | B (80/100) | Unknown | Open-source firewall app for iPhone, iPad and Mac that blocks connections to tracking, ad and malware domains on the device, with custom block lists. |
| [LuLu](https://privacyratings.com/firewalls/lulu/) | B (80/100) | United States (Five Eyes) | Free, open-source firewall for macOS that blocks unknown outgoing connections and asks the user to allow or deny each new one. |
| [OpenSnitch](https://privacyratings.com/firewalls/opensnitch/) | B (80/100) | Unknown | Application firewall for Linux that shows outgoing connections from each program and lets users allow or deny them with per-app rules. |
| [Portmaster](https://privacyratings.com/firewalls/portmaster/) | B (80/100) | Austria | Application firewall for Windows and Linux that monitors and blocks network connections per app, with DNS filtering, tracker blocklists and an optional paid multi-hop network (SPN). |
| [Shorewall](https://privacyratings.com/firewalls/shorewall/) | B (80/100) | Unknown | Configuration tool for the Linux Netfilter firewall that generates iptables rules from high-level zone and policy files. Development has ended and it is no longer maintained. |
| [simplewall](https://privacyratings.com/firewalls/simplewall/) | B (80/100) | Unknown | Windows tool that configures the Windows Filtering Platform (WFP) to allow or block network access per application, with a rules editor and built-in blocklists. |
| [TinyWall](https://privacyratings.com/firewalls/tinywall/) | B (80/100) | Unknown | Lightweight firewall for Windows that builds on Windows Filtering Platform, blocking all traffic by default and allowing apps through a whitelist without popups. |
| [Uncomplicated Firewall](https://privacyratings.com/firewalls/uncomplicated-firewall/) | B (80/100) | Unknown | Command-line front end for managing Netfilter firewall rules on Linux, the default firewall tool on Ubuntu, with simple commands for allowing and denying traffic. |
| [OPNSense](https://privacyratings.com/firewalls/opnsense/) | C (70/100) | Netherlands (Nine Eyes) | Open-source firewall and routing platform based on FreeBSD, with a web interface, VPN, intrusion detection and plugin support. |
| [BunkerWeb](https://privacyratings.com/firewalls/bunkerweb/) | D (50/100) | France (Nine Eyes) | Open-source web application firewall (WAF) built on NGINX that sits in front of web services as a reverse proxy and blocks common attacks, with secure defaults. |
| [Gufw](https://privacyratings.com/firewalls/gufw/) | D (50/100) | Unknown | Graphical interface for ufw (Uncomplicated Firewall) on Linux, for managing firewall rules, profiles and per-application allow or deny rules. |
| [Radio Silence](https://privacyratings.com/firewalls/radio-silence/) | D (50/100) | Unknown | Paid network monitor and outbound firewall for macOS that lists every app's connections and blocks chosen apps from reaching the internet. |
| [Little Snitch](https://privacyratings.com/firewalls/little-snitch/) | F (35/100) | Austria | Application firewall for macOS that alerts on outgoing connections and lets users allow or deny network access per app and per server, with a map of connections. |
| [GlassWire](https://privacyratings.com/firewalls/glasswire/) | F (20/100) | United States (Five Eyes) | Network monitor and firewall for Windows and Android that shows which apps use the network, alerts on new connections and can block apps from going online. |
| [Windows Firewall Control](https://privacyratings.com/firewalls/windows-firewall-control/) | F (20/100) | United States (Five Eyes) | Freeware front end for the built-in Windows Firewall that adds filtering profiles, notifications for blocked outbound connections and easier rule management. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?

Source: https://privacyratings.com/firewalls/