An illustrated stone fortress at dawn: curtain walls, round towers, flags, and a closed gate above a wooden bridge.

Take total control of your Mac’s network.

See every outbound connection your apps make, by name, and block any of them. Everything runs on your Mac.

The problem

That app is talking to where?

Your Mac makes hundreds of outbound connections an hour that you never see. The tools that can show them either flood you with prompts or print raw IP addresses.

ONE IDLE MAC, ONE HOUR 29 destinations, none of them asked
api.statsig.com
mask.icloud.com
telemetry.dropbox.com
o1.ingest.sentry.io
in.appcenter.ms
api.segment.io
cc-api-data.adobe.io
cdn.branch.io
firebaselogging.googleapis.com
analytics.tiktok.com
graph.facebook.com
api.amplitude.com
sb.scorecardresearch.com
incoming.telemetry.mozilla.org
api.mixpanel.com
device-metrics-us.amazon.com
e.crashlytics.com
gateway.icloud.com
spclient.wg.spotify.com
px.ads.linkedin.com
api.datadoghq.com
self.events.data.microsoft.com
edge.microsoft.com
rt.udmserve.net
api.branch.io
ib.adnxs.com
logs.netflix.com
api.smartlook.cloud
doubleclick.net

Nothing leaves your Mac.

Local-only
No accounts, no cloud sync, no servers of ours. Captured data never leaves the device except by an export you ask for.
Zero telemetry
No analytics, no crash reporting, no tracking SDKs. Two optional outbound calls exist, a licence check and an update check, and neither carries your data.
Dropped before it leaves
A denied connection is dropped on this Mac before it ever leaves. Block latency is about 9 ms.

Identify

Know every connection by name.

Portwhistle resolves each IP address to the hostname behind it and names the app that opened the connection, as the traffic happens.

Monitor 4,873 connections today
APPDESTINATIONCCBYTES
Brave api.anthropic.com US 18 kB
Brave api.statsig.com TRACKER US 2.4 kB
Spotify spclient.wg.spotify.com SE 412 kB
Adobe Creative Cloud cc-api-data.adobe.io BLOCKED US 0 B
Slack edge.slack-edge.com US 96 kB
Photos gateway.icloud.com US 1.2 MB
Notion msgstore.www.notion.so US 7.8 kB
Dropbox telemetry.dropbox.com BLOCKED US 0 B
Figma figma-alpha-api.s3.amazonaws.com US 284 kB
Docker production.cloudflare.docker.com US 3.1 MB
Raycast backend.raycast.com US 5.4 kB
Zoom zoomcdn.zoom.us US 62 kB
Music amp-api.music.apple.com IE 31 kB
Arc o1.ingest.sentry.io TRACKER DE 1.9 kB
Brave api.anthropic.com US 18 kB
Brave api.statsig.com TRACKER US 2.4 kB
Spotify spclient.wg.spotify.com SE 412 kB
Adobe Creative Cloud cc-api-data.adobe.io BLOCKED US 0 B
Slack edge.slack-edge.com US 96 kB
Photos gateway.icloud.com US 1.2 MB
Notion msgstore.www.notion.so US 7.8 kB
Dropbox telemetry.dropbox.com BLOCKED US 0 B
Figma figma-alpha-api.s3.amazonaws.com US 284 kB
Docker production.cloudflare.docker.com US 3.1 MB
Raycast backend.raycast.com US 5.4 kB
Zoom zoomcdn.zoom.us US 62 kB
Music amp-api.music.apple.com IE 31 kB
Arc o1.ingest.sentry.io TRACKER DE 1.9 kB

category → app → destination

Names, not addresses

Every connection shows the hostname it reached, not a bare IP.

104.18.32.7api.anthropic.com

  • Grouped by category, then app, then destination
  • Verified app identity, read from the code signature
  • Names read from the server name apps send in the clear, never decrypted
  • Searchable 30-day history, stored on your Mac

Map

See where your data goes.

A world map of everywhere your apps connect. Pick any country to see which applications reach it, and exactly what they touch there.

Bundled offline

The IP-to-country database ships inside the app. Looking up a destination doesn’t ask anyone.

  • Every connection placed on the map in real time
  • Pick a country, see the apps behind it
  • Block a destination straight from the list
Destinations by country LAST 7 DAYS
  • US United States 2,411
  • IE Ireland 604
  • SE Sweden 331
  • DE Germany 208
  • NL Netherlands 96

looked up on your Mac, never online

Control

Two postures. Precise rules. Your call.

Nothing is blocked until you add a rule. Portwhistle starts in monitoring mode and never prompt-floods you.

POSTURE

MonitoringLockdown

Watching everything. Blocking nothing.


BLOCK LATENCY~9 ms

Default-deny lockdown

Flip to Lockdown and nothing leaves unless you allow it. Flip back to Monitoring to simply watch. Critical system traffic always passes, so you can never lock yourself offline.

Rules4 ACTIVE
  • Adobe Creative Cloudall destinations BLOCKED
  • Dropboxtelemetry.dropbox.com BLOCKED
  • Braveapi.statsig.com BLOCKED
  • Spotifyall destinations ALLOWED

Precision app blocking

Block an app and everything it launches, or block just one destination and keep the app working. Your rules stick around across restarts.

30-day history

A rolling view of everything that connected, stored on your Mac and never in a cloud. Read it, export it, or clear it whenever you like.

statsig 31 RESULTS
  • 14:02:11 api.statsig.com DROPPED
  • 13:47:03 featuregates.statsig.com DROPPED
  • 13:12:58 events.statsigapi.net DROPPED
  • 12:55:40 api.statsig.com 4.1 kB

Watch your Mac’s network in the open.

A local-first network monitor and application firewall. No accounts, no tracking, just a clear view of what your machine is doing and the power to shut anything down.