# macOS hardening privacy ratings

Tools that harden macOS systems.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [BlockBlock](https://privacyratings.com/macos-hardening/blockblock/) | B (80/100) | United States (Five Eyes) | A free macOS tool from Objective-See that monitors common persistence locations and alerts when software tries to install itself to run at startup. |
| [KnockKnock](https://privacyratings.com/macos-hardening/knockknock/) | B (80/100) | United States (Five Eyes) | A free macOS tool from Objective-See that lists software installed to run persistently, such as launch agents, login items and extensions, to help find malware. |
| [OverSight](https://privacyratings.com/macos-hardening/oversight/) | B (80/100) | United States (Five Eyes) | A free macOS tool from Objective-See that alerts when the microphone or webcam is turned on and shows which process is using it. |
| [Stronghold](https://privacyratings.com/macos-hardening/stronghold/) | B (80/100) | Unknown | A command-line tool that configures macOS firewall, logging, sharing and other security settings. It was designed for older macOS releases. |
| [Santa](https://privacyratings.com/macos-hardening/santa/) | D (50/100) | United States (Five Eyes) | A binary and file access authorization system for macOS that allows or blocks apps by hash, signing certificate or team ID. Created at Google and now maintained by North Pole Security. |
| [LuLu](https://privacyratings.com/firewalls/lulu/) (rated under Firewalls) | B (80/100) | United States (Five Eyes) | Free, open-source firewall for macOS that blocks unknown outgoing connections and asks the user to allow or deny each new one. |
| [Radio Silence](https://privacyratings.com/firewalls/radio-silence/) (rated under Firewalls) | D (50/100) | Unknown | Paid network monitor and outbound firewall for macOS that lists every app's connections and blocks chosen apps from reaching the internet. |
| [Little Snitch](https://privacyratings.com/firewalls/little-snitch/) (rated under Firewalls) | F (35/100) | Austria | Application firewall for macOS that alerts on outgoing connections and lets users allow or deny network access per app and per server, with a map of connections. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?

Source: https://privacyratings.com/macos-hardening/