Desk log · 584 titles

Mac software news, brief and clear


Firewall Scudo program icon
Mac Apps

Firewall Scudo 3.0.4 Mac

Updated · Filed by Rosa Delgado

Download (5 MB)

From the photo desk

Firewall Scudo is a hybrid firewall for macOS that gives users control over both inbound and outbound connections, filtering traffic at the network level before it reaches applications or services.

Sandboxed rules still match IPs, ranges and domains

Positioned as a simpler alternative to Murus and Vallum from the same developer, Scudo remains fully sandboxed and rules-based. Rules can match IP addresses, ranges, hostnames, and domains, letting a user allow or block access with precision. Inbound service custom rules can be reordered, and a global block list handles inbound and outbound traffic to listed IP addresses and CIDR network addresses. Any rule can be set as temporary or permanent. When a remote computer attempts to connect to local services, or an app tries to reach the network for the first time, Scudo surfaces a notification so the decision stays in the user's hands.

Maintenance update keeps filtering clean on macOS 11.3

The 3.0.4 update ships with refinements detailed in the release notes. While the core filtering engine and rule-matching logic carry forward, the release continues Scudo's track record of maintenance updates that keep the firewall running cleanly on macOS 11.3 and later, on both Intel and Apple Silicon Macs. The interface remains available in English, Spanish, and Italian.

Performance in daily use

In day-to-day work, Scudo runs noticeably light. The menu bar icon sits quietly, and the background process rarely pushes CPU usage above a fraction of a percent during normal browsing, file transfers, or video calls. Memory consumption hovers around 40–60 MB on most setups, which is modest for an application that inspects every packet before it reaches the network stack.

Stability is a strong point. Through days of leaving Scudo active across sleep-wake cycles, VPN reconnections, and network switches between Ethernet and Wi-Fi, the filter engine does not drop rules or crash silently. Notifications for first-time app connections appear within a second of the attempt, and the rule takes effect immediately after a click — no delay, no background lag. Users who search for a firewall Scudo Mac torrent may find that checking code signature and granting full disk access in System Settings helps the app run smoothly, just as with any repackaged version that circulates.

Outbound app filtering without hand-built pf rules

Scudo fits a particular kind of Mac user: someone who wants outbound app filtering without building pf rules by hand. Developers testing how their software phones home, privacy-conscious users who want to see exactly which apps connect to the internet, and anyone who regularly joins untrusted public Wi‑Fi will get the most out of it. The location awareness feature, which can automatically tighten inbound rules on unfamiliar networks, makes it practical for people who split time between a home office and a coffee shop.

It is less suited to users who never look at firewall logs or who prefer a set-and-forget tool. Scudo expects attention — it asks for decisions, and that is the point. Configuration profiles that switch with one click also reward anyone who moves between different security postures during the day, such as a freelancer toggling between an open work mode and a locked-down client network setup.

Version
3.0.4
Download
5 MB
Developer
Davide Feroldi
Languages
English, Spanish, Italian
Activation
Included
Compatibility
macOS 11.3 or later
Architecture
Apple Silicon, Intel 64-bit

Questions readers asked

Scudo shows a notification the first time an app tries to connect, letting the user allow or block that access immediately.

Letters to the desk 0

Sign in or open a desk account to write a letter.

No letters on this brief yet. They are read before they run.

More in Mac Apps

The whole section