Choose what connects
A default-deny firewall for Windows. Decide which apps connect.
SecureWall · v0.4.1 alpha
ExploreBlock by default
Full Control
Control each connection
Keep apps offline until you choose to give them access. SecureWall lets you manage application allow and block rules on Windows 10 21H2+ and Windows 11, with prompts for eligible unknown outbound connections.
Built from TinyWall and open source under GPLv3. Review the code, bring your existing settings, and manage connections from the Windows tray.
Choose when an app gets access
When a connection prompt appears, choose Allow outgoing to save an outbound TCP/UDP rule. Choose Ignore or dismiss it to keep your current rules.
See what is connecting
Open Network Activity from the tray to see observed allowed and blocked connections, TCP states, and local listening ports. The view refreshes every second.
Features
Keep rules per app
Allow the apps you need online and block the ones you want to keep offline. Existing explicit blocks stay in place when you approve a connection prompt.
Troubleshoot a blocked app
Enable diagnostic logging in Settings to help investigate connection problems. Logging is off by default, and collected reports stay local until you choose to share them.
Bring your TinyWall settings
Import a TinyWall .tws export to bring over your whole saved configuration, including rules and other settings. Review the imported settings before making changes.
Get SecureWall
- x64
Intel / AMD
For normal 64-bit Windows PCs.
Download x64 MSI ↗ - ARM64
Windows on ARM
For ARM-based Windows devices.
Download ARM64 MSI ↗ - x86
32-bit Windows
Only for 32-bit Windows installations.
Download x86 MSI ↗
Before you install
v0.4.1 is unsigned alpha software and is not end-to-end verified. Read the setup guide before a trial. Verify the MSI against SHA256SUMS.txt. A firewall defect can interrupt networking or weaken host isolation.
Remove TinyWall and reboot first. Existing SecureWall installations need full removal before this version; in-place upgrades and repair are unsupported. Service loss can leave external networking blocked, including DNS and DHCP. Keep local console access.
Read v0.4.1 release notes ↗Guides
Install SecureWall
Choose the right Windows installer, check the download, and prepare to switch from TinyWall. Read the removal and recovery steps before installing.
Respond to connection prompts
Learn what Allow outgoing saves, what Ignore leaves blocked, and which connections can trigger a prompt.
Turn on diagnostic logging
Find the logging checkbox, record a connection problem, and turn detailed logging off again when you are done.
Collect a troubleshooting report
Gather local logs with the PowerShell collector. Review the report before sharing it with a bug report; nothing is uploaded automatically.