Profiles that follow the network you are on. • Give a network a name and a policy. Home can stay relaxed while any network you have never seen before switches you to something stricter, and the change happens on its own. Networks are told apart by their gateway, so App Firewall never has to ask for your location. Rules that keep a schedule. • Any rule can carry days and hours, including windows that run past midnight. Block a distraction between nine and six, or shut something down while you sleep. The schedule is enforced by the network sensor itself, so it keeps working with the app closed. Data budgets, per app. • Give an app an allowance for the day, the week or the month. When it runs out you either get a warning, or that app comes off the network until the budget resets. A privacy report that names names. • Destinations are matched against a catalogue of ad exchanges, analytics services, telemetry endpoints and delivery networks that ships inside the app. You get a privacy score for every app with its reasoning shown, a breakdown of what your traffic was actually for, and the companies behind the hostnames. Export the whole report as PDF or CSV. Anomaly detection that runs entirely on your Mac. • Every app is measured against its own history: a country it has never reached, an hour it has never worked at, a burst of destinations it has never used, an hour of traffic beyond anything it has moved before. Baselines come from your own database and never leave the machine. A rebuilt interface. • The sidebar is now grouped into Monitor, Control, Insight and Traffic, every screen opens with the same kind of header, and the setup guide explains what the app does before asking for permission to do it. A stronger boundary around the app itself. • App Firewall's network sensor now verifies the code signature of anything trying to talk to it, so only App Firewall itself can read your connection data or change your rules. This is the kind of thing you should be able to take for granted in a firewall, and now you can. Lighter on your Mac. • Background CPU is down sharply while idle, the menu bar popover no longer wakes your Mac when it isn't open, and large connection histories no longer make the interface stall. Protection that stays on. • If App Firewall's saved rules can't be read at startup - a damaged file, a cleanup tool, a failed migration - it now holds your last known protection level instead of quietly letting everything through. Allowlist mode stays Allowlist mode. Allowlist mode is tighter. • An app you have explicitly blocked stays blocked, even on your local network. System DNS is protected properly rather than by leaving a port open to everything. And a remote machine can no longer slip through by choosing a lucky source port. Blocking an app now covers the whole app. • Chrome, Slack and other Electron apps send traffic from helper processes. Blocking the app now covers them too. Fresher location data. • The bundled IP location database has been updated.