Trusted apps
The Trusted by default groups, what each one allows, and what that means for alerts and rules.
Outbound ships with built-in allow rules called Trusted by default. They cover programs that would otherwise ask on day one. Each group is one switch, in the main window’s sidebar under Trusted by default and in Settings › Trusted.
The groups
Section titled “The groups”macOS services (on by default). Apple-signed system processes that are not apps, such as mDNSResponder, trustd and apsd, in the locations macOS protects. Command-line tools you run yourself, and copies of Apple programs elsewhere, are outside this group.
iCloud & Apple services (on by default). Apple’s system services and built-in apps talking to these domains, and their subdomains: apple.com, icloud.com, icloud-content.com, mzstatic.com, apple-cloudkit.com, aaplimg.com, cdn-apple.com, apple-dns.net, apple-mapkit.com, apple-livephotoskit.com. The rule requires Apple’s signature and a SIP-protected location, so a copy left in /tmp cannot use it. The switch counts domains.
Apple apps (on by default). Apple-signed apps in SIP-protected locations, such as Safari, Mail and Music, to any server. Apple apps you install into /Applications, such as Xcode or Pages, are asked about like any other app.
Apps you already have (off by default). A snapshot of the signed apps installed when you switch the group on, matched by team and signing identifier, to any server. Apps you install later are not added. Apple-signed, ad-hoc and unsigned apps are skipped. The switch counts apps.
Local network (off until you turn it on). Any program, to the local network (see Local network traffic). This group is not matched by signature.
VPN apps (on by default). VPN, proxy and DNS-proxy apps installed on this Mac, such as Tailscale, Mullvad or WARP, to any destination, in both directions. The tunnel’s own connections stay up. Each app’s traffic inside the tunnel is still decided by that app’s rules. Providers are detected again when the installed set changes. The switch counts apps, and Settings lists the ones it found. When none are found it says “No VPN app found on this Mac.”
Simulator processes (off by default). The simulated system’s own processes in the iOS, watchOS, tvOS and visionOS simulators installed on this Mac, recognised by Apple’s signature and their protected location. Apps you build and run in a simulator are not included: they are asked about like any app.
What trusting means
Section titled “What trusting means”Every trusted rule is an allow, forever, so a trusted program connects without an alert in every mode. Apple groups, and Simulator processes, match by Apple’s signature. Apps you already have, and VPN apps, match by code identity. None of them match by path or by build hash, so an OS update that re-signs a binary changes nothing. The local-network group is the exception: it matches any program to local addresses.
Your own rules, blocklist rules and other rule groups beat a trusted rule when both match. A Priority rule is compared first, so a priority trusted rule can still beat an ordinary rule of yours. The managed override puts Organization rules ahead of trusted rules. It does not boost the trusted groups. Strict mode’s block of unknown connections leaves the VPN group in place, which is why those apps stay connected until you turn the group off.
The count beside a switch is how many rules, apps or domains that group installs. While a group stays on, a rule you switch off inside it stays off. Turning the group off removes its rules. Turning it on again installs them switched on. Switching a group on allows more than before, so it follows the same approval as any change that unblocks (see Review and unapproved rules).