Snitch is a self-hosted network monitor and outbound firewall that shows every connection your server makes, which process opened it, and where in the world it goes, then lets you block it on the spot. A live force graph puts your machine at the center with each remote host as a node, while a world map plots geolocated destinations and a sliding timeline keeps the last day of traffic searchable. Every alert is actionable: block the IP, kill or suspend the process, or write a rule that firewalls matched hosts automatically by address, domain, port, country, or ASN. Detection covers port scans, beaconing, DNS tunneling, ICMP tunnels, cleartext ports, and self-signed or mismatched TLS certificates, and an isolation-forest model learns your normal flows and flags outliers. A lockdown switch cuts all public outbound traffic while the LAN stays up, for the moment something looks wrong. Findings can stream to Wazuh, Splunk, or Elastic as syslog and ECS events, or land in Discord, Slack, and Telegram as webhook alerts. Everything stays on your machine: history lives in a local database, geolocation works fully offline, and the interface speaks eight languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.