# Snitch

> Snitch is a self-hosted, open-source network monitor and firewall with live graph, world map, anomaly detection, and OS-native blocking. Runs on macOS, Windows, Linux.

- **Category:** Network Monitoring
- **Licence:** AGPL-3.0
- **Latest version:** v1.6.4
- **Open source:** oss
- **Languages:** JavaScript, Python
- **Platforms:** Docker, Linux, Windows, macOS
- **Tags:** Electron, Privacy, Cross Platform, Fleet Management, Firewall, Cybersecurity, Network Security, Open Source, React, Rust, Linux, macOS, Windows, Fastapi, Agpl, Self Hosted, Siem, Syslog, Ebpf, Threat intelligence, Anomaly detection, D3.js, Packet Capture, Edr, Network Monitor, Outbound Firewall, Offline Geolocation, Little Snitch Alternative

## Description

Snitch is a privacy-first network monitoring tool that lets you see every outbound connection from your computer in real time. It displays a live force-directed graph with your machine at the center, a geolocated world map of remote hosts, and a sliding timeline of traffic history. The software detects anomalies like port scans, beaconing, DNS tunneling, and data exfiltration patterns using pure-Python ML models. It can block connections through the OS-native firewall (Windows Filtering Platform, nftables/iptables, pf) rather than filtering in user space. Snitch runs as a desktop app (Electron/React) on macOS, Windows, and Linux, plus a headless daemon for servers and a Docker container for Linux. All data stays local in SQLite with configurable retention; geolocation uses an offline DB-IP Lite database. Optional integrations include syslog/SIEM export (CEF, RFC 3164), webhooks to chat platforms, and threat intelligence lookups with your own API keys. The project is licensed under AGPL-3.0 and has no telemetry or mandatory outbound calls.

## Links

- [Homepage](https://github.com/aixisstudio/snitch)
- [Website](https://aixisstudio.github.io/Snitch/)
- [Docker](ghcr.io/aixisstudio/snitch)
- [GitHub Repository](https://github.com/aixisstudio/Snitch)
- [Documentation (README)](https://github.com/aixisstudio/Snitch/blob/main/README.md)
- [Firewall Documentation](https://github.com/aixisstudio/Snitch/blob/main/docs/FIREWALL.md)
- [Enterprise Integrations](https://github.com/aixisstudio/Snitch/blob/main/docs/INTEGRATIONS.md)
- [GitHub Discussions](https://github.com/aixisstudio/Snitch/discussions)
- [Releases](https://github.com/aixisstudio/Snitch/releases/latest)
- [Docker Image (GHCR)](https://ghcr.io/aixisstudio/snitch)

---
Source: https://selfhost.directory/project/snitch