Application firewalls

The Littlenitch pitch explains the concept:

As soon as you’re connected to the Internet, applications can potentially send whatever they want to wherever they want. Most often they do this to your benefit. But sometimes, like in the case of tracking software, trojans, or other malware, they don’t.

But you don’t notice anything, because all of this happens invisibly under the hood.

Application firewalls mitigate this problem on a per-application basis.

Note that one might also want to look at network firewalls which stop whole network protocols from doing stuff, and application sandboxes, which prevent other naughty behaviour by apps, e.g. accessing local files or devices or other services that they should not.