NetGlobe vs Portmaster
Both show up in searches for "see and control what my computer connects to," but they work at different layers. Portmaster, by Safing, is an open-source application firewall and privacy suite — it blocks connections per app and filters DNS. NetGlobe is network intelligence — it shows you, in real time and in depth, every connection your machine makes. Here's an honest, feature-by-feature comparison.
The short version
If you want to block and filter what your machine is allowed to reach — per-app rules and DNS-level filtering — Portmaster is a capable, open-source tool built exactly for that, and it's free.
If you want to see and understand what your machine is connecting to — geolocated on a live map and 3D globe, with WHOIS/RDAP, TLS inspection, process trust scoring, threat-intel feeds, and a full diagnostics toolkit — on Windows or Mac, then NetGlobe is built for that — a one-time $18.99 on either platform.
Different layers. Plenty of people run both.
Feature-by-feature.
Where the two tools overlap, and where they don't.
| NetGlobe | Portmaster | |
|---|---|---|
| What it is | Real-time network intelligence & diagnostics | Application firewall & privacy suite (blocking + DNS filtering) |
| Open source | No — commercial, one-time license | Yes — open-source (Safing) |
| Platforms | Windows 10/11 and macOS 11+ (Apple Silicon & Intel) | Windows & Linux (macOS limited/experimental — check Safing's site) |
| Blocks / denies connections | No — visibility, not enforcement | Yes — its core feature |
| DNS-level filtering / blocking | No — observes, never intercepts | Yes — a core Portmaster feature |
| Live geolocated world map + 3D globe | Yes — 2D map and cinematic 3D globe | Per-app connection views (not a geolocated globe) |
| Per-endpoint intel (WHOIS / RDAP, TLS cert, reverse DNS) | Yes — one-click Endpoint Focus panel | Connection details, focused on filtering |
| Process trust scoring (code-signing, parent process, file age) | Yes — 0–100 score with reasons | Rule-based, not scored |
| Threat-intel feeds (FireHOL, Spamhaus DROP/EDROP, ThreatFox, Tor) | Yes — built in for analysis, configurable | Uses filter lists to block (a different purpose) |
| Diagnostics (traceroute, MTR, iperf3, speed test, port scan, path MTU) | Yes — full toolkit built in | No |
| Internet-health context (BGP instability, IODA / IHR) | Yes | No |
| Runs locally · no account · no telemetry | Yes | Yes (local, privacy-focused) |
| Price | $18.99 one-time · Windows & Mac | Free / open-source (optional paid tier — check vendor) |
Comparison reflects each product's primary design goal. Portmaster's feature set, platforms, and pricing are drawn from Safing's public materials and can change — check the vendor's site for the latest details.
Choose Portmaster if…
- You want to block and filter — per-app connection control and DNS-level filtering to stop trackers and unwanted traffic.
- You value open-source software you can audit, and you're on Windows or Linux.
- You want enforcement and privacy filtering more than deep diagnostics.
Choose NetGlobe if…
- You want to see and understand every connection — geolocation, owner, TLS, trust score, threat-intel matches.
- You're on macOS, or you run both Windows and Mac and want one native tool on each.
- You want traceroute, MTR, iperf3, and speed tests built into the same window.
Block & filter vs. see & diagnose.
Portmaster answers the question "should this connection be allowed?" It sits in the path of your traffic, enforces per-app rules, and filters DNS to strip out trackers and unwanted destinations. That's exactly what a firewall and privacy suite should do, and being open-source, you can read the code that does it.
NetGlobe answers a different question: "what is this connection, and should I be worried?" Click any line on the live map and NetGlobe pivots to that endpoint — the process behind it and its trust score, the network owner via WHOIS/RDAP, the TLS certificate, reverse DNS, path MTU, a live MTR trace, and any hits across FireHOL, Spamhaus, ThreatFox, or the Tor exit list. It uses threat intel to explain, not to block — it's a lens, not a gate.
That's why the two coexist so naturally. Portmaster decides what's allowed and keeps DNS clean; NetGlobe explains what's actually happening — then hands you traceroute, iperf3, and a speed test to chase down anything that looks off, without leaving the app.
"Does Portmaster run on macOS?"
This one comes up a lot, and the honest answer is: check Safing's site. Portmaster has historically been built for Windows and Linux, and Mac support has been limited or experimental — so we won't over-claim its current state. If you're a Mac user who wants deep visibility into every outbound connection today, NetGlobe ships a native macOS build for both Apple Silicon and Intel (macOS 11 or later), and the identical feature set on Windows 10 and 11. NetGlobe won't block connections or filter DNS — but for most people asking that question, seeing is the first thing they're missing, and NetGlobe gives you that on the Mac out of the box.
NetGlobe vs Portmaster — FAQ
Is NetGlobe a firewall like Portmaster?
No. Portmaster is an application firewall — it can block and allow outbound connections per app and enforce rules. NetGlobe is a visibility and diagnostics tool: it shows you every connection your machine makes, geolocated and analyzed in real time, but it does not block traffic. Many people run a firewall for enforcement and NetGlobe for understanding.
Does NetGlobe block or filter DNS?
No. DNS-level filtering and blocking is a core Portmaster feature, not a NetGlobe one. NetGlobe reads and analyzes your connections — resolving names, geolocation, network owner, TLS certificates and threat-intel matches — but it does not intercept, rewrite, or block DNS. It observes; it does not enforce.
Does Portmaster run on macOS?
Portmaster has historically targeted Windows and Linux, and Mac support has been limited or experimental — check Safing's site for its current macOS status. NetGlobe ships a native macOS build for both Apple Silicon and Intel on macOS 11 or later, alongside its Windows 10 and 11 version, so you get the same visibility on either platform.
How much does NetGlobe cost compared to Portmaster?
NetGlobe is a one-time $18.99 purchase on both platforms — on the Microsoft Store for Windows and as a direct download for Mac. Portmaster is free and open-source, with an optional paid tier; check Safing's site for its current plans and pricing.
Can I use NetGlobe and Portmaster together?
Yes. They solve different problems and don't conflict. Portmaster enforces what your machine is allowed to talk to and filters DNS; NetGlobe explains what it is talking to — geolocation, network owner, TLS certificate, process trust score, threat-intel matches, and route diagnostics.
Portmaster is a product of Safing ICS Technologies. NetGlobe and Van Dien io are not affiliated with or endorsed by them. This comparison is provided for informational purposes; product details, platforms, and pricing can change — verify current specifics on each vendor's site.
More NetGlobe comparisons
See what your machine is really doing.
A one-time $18.99 — on the Microsoft Store for Windows, or a direct download for Mac.
No account. Runs entirely on your device. See the full feature list or the FAQ.