Skip to main content

TinyShield Documentation

TinyShield is a native macOS app that shows which apps use the network and lets you control their connections. You can block one app or domain, approve new apps as they connect, or stop almost all network access at once.

TinyShield uses Apple's Network Extension framework. Network monitoring and filtering happen on your Mac. Your captured connection data is not sent to TinyShield servers.

Watch apps appear as they connect, then expand an app to see its destinations.

1. What you can do​

  • ✅ See active network connections from apps and macOS services.
  • ✅ Read hostnames, IP addresses, ports, and destination countries.
  • ✅ Block an app, domain, wildcard domain, or IP address.
  • ✅ Keep a Block List and an Allow List.
  • ✅ Ask before a new app is allowed to connect.
  • ✅ Switch between Allow All, Require Approval, and Block All.
  • ✅ View destination locations on the GeoIP map.
  • ✅ Keep all monitored network data on your Mac.

TinyShield supports macOS 15 or later on Apple silicon and Intel Macs.

2. Start monitoring your Mac​

  1. Download TinyShield.
  2. Move TinyShield to the Applications folder.
  3. Open TinyShield and select Get Started.
  4. Install the Network Extension when asked.
  5. In System Settings, turn on the TinyShield Network Extension and approve Filter Network Content.
  6. Open an app that uses the internet. Its connections appear in TinyShield.
  7. Expand the app to see its domains and IP addresses.

See Network Extension setup for the full setup steps.

3. Choose a connection mode​

Use the mode button in the top-right corner of the TinyShield window.

ModeWhat happens
Allow AllAllows new connections unless they match your Block List.
Require ApprovalPauses connections from new apps until you allow or block them.
Block AllBlocks connections unless an Allow List or enabled exception permits them.

Require Approval and Block All are TinyShield PRO features.

4. Find a connection​

The main list is grouped by app or system service. Expand a row to see its domains and IP addresses. Use the search field to find an app or destination.

Green means a connection is active or allowed. Red means TinyShield blocked the connection. The time menu lets you focus on recent activity.

5. Where to go next​

For help, read Support or email tinyshield@proxyman.com.