Repository navigation
Flowlight 0.1.0
Early preview. Flowlight shows which app on your Mac talked to which domain, over which protocol, and how much it sent. It also watches AI agents (Claude Code, Codex, Cursor and any app that calls an LLM API) for email, SSH, file transfers, large uploads and activity while you're away.
Install
- Download Flowlight.dmg, open it, and drag Flowlight into Applications. Prefer an installer? Use Flowlight-0.1.0.pkg.
- First launch: this preview isn't notarized yet, so macOS will say it can't verify the developer. Right-click Flowlight in Applications and choose Open, then Open again. You only need to do this once. (On macOS 15 and later you can also allow it under System Settings › Privacy & Security › Open Anyway.)
- Approve the one-time Name Your Traffic setup so Flowlight can read hostnames.
To look around with synthetic data first: open /Applications/Flowlight.app --args -FLDemo YES
Highlights
- Every TCP/UDP flow attributed to its app, with real hostnames from TLS SNI and DNS
- AI Agents view with sensitive-channel, exfiltration, unnamed-host and while-away rules
- 108 protocols in 13 families, including SMTP/IMAP/POP3, FTP/SMB, SSH/RDP, VPNs and Tor
- Reports from second to year, grouped by app, destination or IP, with charts and CSV export
- Everything stays on your Mac: no account, no telemetry
Requires macOS 15 or later. Universal (Apple silicon and Intel).
Checksums (SHA-256)
9340ee4371a0dcc026b53f0c8fad34d164dbe42937b0a650097feb2da0e779bd Flowlight.dmg
fd241adb684469171a3d62aeb897b56c0ea67411d67cb669148ad01358336836 Flowlight-0.1.0.pkg