Real visibility into what's actually around you.
Continuous radio and network monitoring — Wi-Fi, Bluetooth, your local network and more — for people who actually want to know — not be reassured. Built for the technically curious, the professionally cautious, and anyone tired of taking a router app's word for it.
“Built for people who'd rather see the raw signal than be told to trust a green checkmark.”
Who this is actually for.
Journalists and researchers who need to know if they're being tracked or targeted.
Security researchers and network engineers who want the RF side covered the way they already cover the wire.
People who take their own privacy seriously enough to verify it, not just assume it.
Anyone who already runs their own Pi-hole, firewall rules, or VPN, and wants the wireless blind spot closed too.
Detection Capabilities
The sensor only listens and collects. Recognition runs in the HaloWarden engine, so detection keeps getting better without new hardware. No vague security scores — every result comes with the evidence behind it.
Wi-Fi Monitoring
Passively sweeps 2.4GHz and 5GHz, hidden networks included. Every access point in range — vendor, model, security posture, and any downgrade in that posture — without joining a single network.
Bluetooth & BLE Identification
Identifies specific tracker protocols — Apple Find My, Tile, Samsung SmartTag, Google Fast Pair — not just 'a BLE device nearby.' Unidentifiable advertising is reported as unknown, not guessed at.
Connection-Attempt Detection
Devices actively trying to connect where they shouldn't — a strong signal something nearby is probing for access.
Local Network Classification
Every discovered host scored into a device category, model, OS, and vendor — with a confidence value and a named match source. Every contributing signal stays inspectable, not just the verdict.
External Exposure Check
Scans your network's public IP the way an attacker would — catching anything unintentionally exposed before someone else finds it.
Decoy Networks
The sensor can bring up decoy Wi-Fi networks — up to 32 at once. A phone or gadget that remembers one of those names may try to join, and every attempt is logged. Can be switched off by region.
Anomaly Detection
Sixteen detectors watch for patterns, not just devices: a tracker that keeps showing up, gateway spoofing, Wi-Fi deauthentication and access-point floods, Bluetooth pairing spam, unusual-hour presence, a device that quietly renames itself.
Beyond Wi-Fi & Bluetooth
The same engine already reads more of the spectrum on our prototypes: LoRa mesh and LoRaWAN (Meshtastic, MeshCore, Reticulum and more), Zigbee and Thread, drone Remote ID over Bluetooth and Wi-Fi, and software-defined radio across 15+ bands with 433 MHz decoding. Matter devices are recognized on your local network. These radios come together in the full sensor.
See the evidence, not just the verdict.
Every classification carries the individual signals it was built from — not just 'this is a smart speaker,' but which banner, which certificate, which vendor ID led there. You can tag what a device actually is, and the system keeps your tag alongside its own answer, never overwriting it.
Patterns over time, not just point-in-time alerts.
Visit counts and total duration per device, over any window you choose — distinguishing 'the neighbor's phone, every day at 6pm' from something actually worth investigating.
What we're upfront about.
We do not sell magic. Network and radio frequency monitoring has physical boundaries. Here is exactly where the current engine stands today.
Bluetooth trackers that rotate their address (most phones do this every ~15 minutes) may briefly appear as more than one device before reconciliation.
Detection thresholds are sound defaults — being actively tuned against real-world data, not finalized yet.
Insider-style anomaly alerting on data access isn't built yet — every read is authorized and logged, but nothing watches the access pattern itself yet.
Cutting an unwanted device off your own network is built but not yet verified on real hardware. It will ship off by default, IPv4 only, behind explicit consent steps — and lifting a block is one step.
The port-classification engine also runs standalone — feed it your own nmap or masscan output and get the same service/risk identification, no HaloWarden sensor required.
Transparent Hardware & Service
Two sensors, one plan. Extra features unlock one at a time — pay only for what you use.
Our firmware on certified off-the-shelf hardware. Available to early users now.
Every radio on one board. Not shipping yet.
Premium features already in the hardware unlock one-time, $50–100. Planned: a local-only mode that sends raw events over MQTT or an API to your own tools, at no extra charge. Pre-launch — final prices may change before shipping.
Request Early AccessStop guessing what's on your network.
Continuous, auditable RF and host telemetry delivered straight to your own screen.