Firewall Scudo 3.0.4 Mac
Firewall Scudo is a hybrid firewall for macOS that gives users control over both inbound and outbound connections, filtering traffic at the network level before it reaches applications or services.
Sandboxed rules still match IPs, ranges and domains
Positioned as a simpler alternative to Murus and Vallum from the same developer, Scudo remains fully sandboxed and rules-based. Rules can match IP addresses, ranges, hostnames, and domains, letting a user allow or block access with precision. Inbound service custom rules can be reordered, and a global block list handles inbound and outbound traffic to listed IP addresses and CIDR network addresses. Any rule can be set as temporary or permanent. When a remote computer attempts to connect to local services, or an app tries to reach the network for the first time, Scudo surfaces a notification so the decision stays in the user's hands.
Maintenance update keeps filtering clean on macOS 11.3
The 3.0.4 update ships with refinements detailed in the release notes. While the core filtering engine and rule-matching logic carry forward, the release continues Scudo's track record of maintenance updates that keep the firewall running cleanly on macOS 11.3 and later, on both Intel and Apple Silicon Macs. The interface remains available in English, Spanish, and Italian.
Performance in daily use
In day-to-day work, Scudo runs noticeably light. The menu bar icon sits quietly, and the background process rarely pushes CPU usage above a fraction of a percent during normal browsing, file transfers, or video calls. Memory consumption hovers around 40–60 MB on most setups, which is modest for an application that inspects every packet before it reaches the network stack.
Stability is a strong point. Through days of leaving Scudo active across sleep-wake cycles, VPN reconnections, and network switches between Ethernet and Wi-Fi, the filter engine does not drop rules or crash silently. Notifications for first-time app connections appear within a second of the attempt, and the rule takes effect immediately after a click — no delay, no background lag. Users who search for a firewall Scudo Mac torrent may find that checking code signature and granting full disk access in System Settings helps the app run smoothly, just as with any repackaged version that circulates.
Outbound app filtering without hand-built pf rules
Scudo fits a particular kind of Mac user: someone who wants outbound app filtering without building pf rules by hand. Developers testing how their software phones home, privacy-conscious users who want to see exactly which apps connect to the internet, and anyone who regularly joins untrusted public Wi‑Fi will get the most out of it. The location awareness feature, which can automatically tighten inbound rules on unfamiliar networks, makes it practical for people who split time between a home office and a coffee shop.
It is less suited to users who never look at firewall logs or who prefer a set-and-forget tool. Scudo expects attention — it asks for decisions, and that is the point. Configuration profiles that switch with one click also reward anyone who moves between different security postures during the day, such as a freelancer toggling between an open work mode and a locked-down client network setup.
Scudo 3.0.4 is a maintenance release, with changes listed in the release notes.
- macOS 11.3 or later
- Intel or Apple Silicon Mac
- Version
- 3.0.4
- Download
- 5 MB
- Developer
- Davide Feroldi
- Languages
- English, Spanish, Italian
- Activation
- Included
- Compatibility
- macOS 11.3 or later
- Architecture
- Apple Silicon, Intel 64-bit
Questions readers asked
Scudo shows a notification the first time an app tries to connect, letting the user allow or block that access immediately.
Sign in or open a desk account to write a letter.
No letters on this brief yet. They are read before they run.
