{
  "id": 12124030,
  "title": "Every app on your Mac is talking to the internet - I built a map of it (zero telemetry)",
  "url": "https://urgent.news/2026/10/05/every-app-on-your-mac-is-talking-to-the-internet-i-built-a-map-of-it",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-05T10:06:16.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/aixis_studio/every-app-on-your-mac-is-talking-to-the-internet-i-built-a-map-of-it-zero-telemetry-1h2f"
  },
  "original_language": "en",
  "account": "Your Mac makes hundreds of outbound connections every hour, including updaters, analytics SDKs, crash reporters, and CDNs. These connections are not visible unless you specifically look for them. Tools like lsof -i or Little Snitch provide some visibility, but they come with limitations. To address this need, the developers built Snitch, an open-source, local-first network traffic visualizer for macOS. Snitch offers a live graph of every outbound connection, grouped by process, a world map plotting destination IPs, per-app breakdowns of bytes in/out, destinations, and an anomaly alert system when a process connects to a new destination. The tool also features a demo mode for exploring the UI with synthetic data and does not require root access. Privacy is a key focus; Snitch's network monitor only binds to 127.0.0.1, and no destination IP ever leaves the machine. Anonymized GeoIP lookup is performed against a bundled database. Snitch's backend is written in Python using FastAPI, and it polls nettop / lsof to attribute per-process connections. Connections stream to the React frontend over a token-authenticated WebSocket, rendered as a force-directed graph and an SVG world map. While Snitch visualizes connections, it does not block them, leaving blocking functionality to complementary tools like LuLu. Currently, the macOS build is unsigned, but builds for Windows and Linux are planned. Snitch is AGPL-3.0 licensed and free forever, with bilingual documentation available in English and French. The project encourages contributions, with four good first issue tickets available for those interested in getting involved.",
  "summary": "Your Mac makes hundreds of outbound connections every hour — updaters, analytics SDKs, crash reporters, CDNs. None of it is visible unless you go looking. lsof -i gives you a wall of IPs. Little Snitch gives you prompts, a firewall, and a €59 price tag. We wanted something in between: see everything, block nothing, send nothing . So we built Snitch — an open-source, local-first network traffic…",
  "key_points": [
    "Snitch visualizes all outbound connections from Mac apps to the internet",
    "Connections are grouped by process and displayed on a live graph",
    "Privacy-focused tool monitors only local connections (127.0.0.1)"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}