OpenSnitchInteractive application firewall for GNU/Linux.GPL-3.0
Interactive application firewall for GNU/Linux.
OpenSnitch is a GNU/Linux application firewall for reviewing and filtering outbound connections interactively. Its graphical interface also configures nftables system rules, including inbound service access, and can manage multiple nodes centrally. Users install distribution packages for the firewall and interface; domain blocklists and SIEM integration support additional network-monitoring workflows.
OpenSnitch README · Reviewed 2026-10-27
- 01 / Feature noteInteractive connection filtering
Review outbound application connections and control whether they are allowed.
Feature source ↗ - 02 / Feature noteMultiple-node management
Manage several OpenSnitch nodes from one graphical interface.
Feature source ↗
GitHub stars
14,242
Detected license
GPL-3.0
Repository created
2017-04-16
Repository push
2026-07-26
2017-04-16GitHub release
2025-12-15 · v1.8.0Repository push
2026-07-26
GitHub stars
Unknown
i
Cached history uses a different month window; chart withheld until aligned.
Latest attempt: ok · Checked 2026-10-15T18:22:24.727650+00:00 · Last successful fetch 2026-10-15T18:22:24.727650+00:00 · Provider source
Hacker News stories
Unknown
i
OpenSSF Scorecard
3.8/10
Scanned 2026-10-19 · 13 scored / 14 returned
i
- Maintained · 4/10
4 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 4
- Dangerous-Workflow · 10/10
no dangerous workflow patterns detected
- Code-Review · 1/10
Found 4/30 approved changesets -- score normalized to 1
- Packaging · Inconclusive
packaging workflow not detected
- Token-Permissions · 0/10
detected GitHub workflow tokens with excessive permissions
- Binary-Artifacts · 10/10
no binaries found in the repo
- Pinned-Dependencies · 2/10
dependency not pinned by hash detected -- score normalized to 2
- CII-Best-Practices · 0/10
no effort to earn an OpenSSF best practices badge detected
- Security-Policy · 0/10
security policy file not detected
- Fuzzing · 0/10
project is not fuzzed
- License · 10/10
license file detected
- Branch-Protection · 0/10
branch protection not enabled on development/release branches
- Signed-Releases · 8/10
5 out of the last 5 releases have a total of 5 signed artifacts.
- SAST · 0/10
SAST tool is not run on all commits -- score normalized to 0
Repository commit a1353848ba1b · Scorecard v5.6.0
Checked 2026-11-03T07:55:50Z · Last successful fetch 2026-11-03T07:55:50Z · Value fetched 2026-11-03T07:55:50Z · Provider source
GitHub release
Published 2025-12-15
i
Checked 2026-11-04T04:04:05Z · Last successful fetch 2026-11-04T04:04:05Z · Value fetched 2026-11-04T04:04:05Z · Provider source
Unknown

