Coming soon for macOS

A unified firewall for your Macs

A doorman at every door of your network.

A doorman checks everyone against a guest list. Doormen does the same for every connection your Mac makes: which app made it, who owns the server on the other end, and whether your rules let it through.

Get early access No telemetry. No account.

Tonight's guest list

Safari → nytimes.comThe New York Times · United StatesAllowed
Safari → securepubads.g.doubleclick.netGoogle · advertisingBlocked
Slack → slack.comSalesforce · via AmazonAllowed
Unknown helper → 185.220.101.4No signature · GermanyBlocked

One guest list, every door.

Doormen is several firewalls working as one. Each Mac gets its own doorman, and paired Macs share the same rules, so home, office and laptop all follow one policy.

See every connection

Every app, every destination, the company behind it and its country, live.

Write the guest list once

Rules per app and per destination, block lists and profiles for Home, Work and Public Wi-Fi.

Share it across your Macs

Pair Macs with a one-time code. Rules sync end-to-end encrypted, and nothing is ever overwritten without asking.

Everything a doorman needs.

Clear answers instead of IP addresses.

Monitor

Every live connection, the app behind it, and what your policy would do. On a list or a world map.

Rules

Allow or deny per app and per destination, for a while or for good.

Block lists

Subscribe to tracker, ad and malware lists and keep them up to date.

Who owns it

A local database turns addresses into companies: doubleclick.net is Google.

Web trackers

A browser companion shows which other companies each page you visit talks to.

Guard

Rules are tied to code signatures, so a renamed copy can't pretend to be an app you trust.

Encrypted DNS

Set up DNS over HTTPS with the provider you choose.

Devices

See what else is on your network, and pair your other Macs.

Real blocking

Start in watch-only mode, then switch on blocking when the guest list looks right.

The doorman works for you.

A firewall that phones home isn't a firewall.