Vallum

Vallum provides an application‑layer firewall for macOS that lets users control inbound and outbound network traffic on a per‑app basis. Using the macOS System Extensions API, it runs entirely in userland without kernel extensions, offering pop‑up alerts for inbound connections, hostname or domain matching, and rule conditions that can reference current network settings such as SSID or interface.

The interface is designed for simplicity: users can drag and drop applications or folders from Finder into the firewall to create rules that become active immediately and persist across reboots. Rules can be organized with groups, matched by signature type or developer, and edited through a dedicated rules editor. Additional tools include an endpoint security component that blocks execution attempts and a bandwidth‑throttling feature for per‑app monitoring.

Vallum is distributed as a universal macOS app supporting both Apple Silicon and Intel hardware, requiring macOS 11.2 or later. It is positioned for any Mac user who wants a lightweight, native solution for managing application network access and enhancing privacy.