NetAudit discovers every device on your LAN, scans for open services, matches versions against the NVD CVE database, audits your gateway and Wi-Fi configuration, and emits a severity-ranked report in minutes.
Six categories of checks, every device, every port, every known CVE. No agents to install on endpoints — runs from one Mac on your network.
Finds every device on the LAN via ARP, nmap ping sweep, mDNS, and reverse DNS — including printers, IoT, and rogue devices.
Top 100 or 1000 TCP ports per host, service version detection, OS fingerprint. Flags risky services like Telnet, RDP, exposed databases.
Each detected service version is checked against the NVD CVE database. Findings are CVSS-ranked with direct links to vendor advisories.
Detects HTTP-only admin panels, UPnP exposure, default credentials (opt-in), and flat-network topology that enables lateral movement.
WPA1/2/3 detection, mixed-mode TKIP downgrade risk, legacy 802.11n hardware, evil-twin / duplicate-SSID detection.
DNS NXDOMAIN rewriting, ISP-only resolver, IPv6 firewall parity, broadly-exposed SMB/NetBIOS — the things attackers actually exploit.
One terminal command on a Mac. No agents, no kernel drivers, no infra to deploy.
Wi-Fi or Ethernet — anywhere a normal client device would join.
netaudit --intensity fast — discovery, port scan, CVE match, gateway audit, Wi-Fi audit.
Severity-ranked HTML report with remediation steps. Optionally upload to your dashboard for history and trends.
Audit as many devices on as many networks as you want. Pay for what you need from the cloud dashboard.