opensnitch

Prompts users in real-time to allow or deny outbound connections, providing immediate visibility and control over application network access, as highlighted in the key features.

Enables blocking of ads, trackers, and malware domains across the entire system using configurable block lists, directly referenced in the README's key features.

Allows management of multiple Linux nodes from a single graphical interface, simplifying firewall administration for distributed systems, as noted in the documentation.

Supports integration with Security Information and Event Management systems for enhanced monitoring and logging, making it useful for security professionals.