NodeSpectra: Network Toolkit

AckerWorx

In-app purchases

About this app

A premium network-analysis toolkit for people who own their data. Local-first — every scan and device list stays on your phone. No accounts, no cloud sync, no analytics, no ads, no subscription. Buy what you want, once.

FREE
• Local network scan — every device on your Wi-Fi or Ethernet LAN
• Device recognition — vendor + model inferred on-device from mDNS, SNMP, TLS and HTTP; no MAC address needed (Android 10+)
• Bundled OUI vendor database — no online call
• Ping, traceroute, DNS lookup (A/AAAA/MX/TXT/NS/SOA/CNAME), port scanner
• Wi-Fi Analyzer — channels, signal, security, congestion
• Bluetooth Analyzer — BLE metadata only; no pairing, no GATT
• Cellular Analyzer — carrier, network type, signal, cell ID
• Wake-on-LAN, subnet calculator, Whois, Hidden Camera Detector
• M-Lab NDT7 speed test, heuristic security analysis, Device Report

LIFETIME PRO (one-time)
• Unlimited diagnostics history
• Network map — radial hub-and-spoke visualization
• Multi-network profiles (home / office / café)
• HTML + PDF report templates, advanced port-scan profiles

REMOTE ENRICHMENT (one-time)
• Optional lookups with your own API keys — you control your spend
• AbuseIPDB, GreyNoise, Shodan, Censys, ipinfo.io, RDAP, VirusTotal, NVD
• Per-provider consent gate; nothing leaves the device until you opt in
• Private IPs, full MACs, SSIDs, hostnames and notes are NEVER sent

VISUAL TRACEROUTE (one-time)
• World map with great-circle hop arcs
• ASN / ISP attribution per hop with country flags
• Saved targets and side-by-side run comparison

AUDIT PACK (one-time)
• Service-banner grabbing feeding richer CVE matching
• Saved baselines + automatic diff (NEW / PORTS / IP / VENDOR badges)
• Wi-Fi anomaly detection: evil-twin SSIDs, hidden+strong, WPS-on-WPA1/WEP
• Rogue DHCP cross-check against the gateway
• Background CVE auto-watch (12 h, via the consent gate)
• Packet metadata export (headers only) via the system file picker
• Evidence-grade report bundle — HTML + JSON + SHA-256 manifest, zipped
• Authorised per-session GATT probing — read + notify only

OSINT SUITE (one-time — read-only, public data)
• Chain Trace — EVM address balances, activity, dust flagging
• Domain Intel — RDAP/WHOIS registration + DNS footprint
• IP Intel — owner / ASN / routing / geo
• Public data only — no scraping, no wallet keys or seed phrases

ALL ACCESS (one-time)
• All five packs combined — cheaper than buying each separately

POWER TOOLS (one-time, sold separately)
• Live Connections — per-app socket inspector (rooted devices)
• Faster ARP-first discovery on rooted devices
• Standard versions remain on every device; NodeSpectra never assists in rooting

VPN DISCLOSURE
NodeSpectra is not a VPN service and does not hide your IP address or change your location. The Packet Metadata tool uses Android's VpnService API to observe this device's own traffic locally — no remote server, nothing uploaded. It reads packet headers only (protocol, addresses, ports, byte counts); your traffic contents are never inspected, decrypted, stored or logged. Sessions are user-started and stop automatically after 30 seconds. Packets are analysed then discarded, so network activity pauses while a preview runs.

PRIVACY YOU CAN VERIFY
• Local-Only Mode is ON by default — no remote call until you opt in per provider
• No analytics SDK, no crash reporter, no ad SDK, no third-party tracker
• API keys stored locally, encrypted with an Android-Keystore-bound key
• Bluetooth uses neverForLocation; cellular reads carrier and signal only — never IMEI, IMSI, SIM serial, phone number, SMS or contacts
• MAC addresses masked to the 3-byte OUI prefix before any lookup

WHY NODESPECTRA
Most network apps sell a subscription or quietly ship your scan history to their backend. NodeSpectra is one-time purchase and runs enrichment on YOUR keys — the code that gates what leaves your device is the code that drives the UI badges.

Built by AckerWorx, a cybersecurity company. The privacy promise is the product.

What’s new

v1.0.1 — VpnService policy remediation.
• Packet Metadata now shows a full disclosure before Android's VPN permission prompt —
local-only tunnel, headers only, 30-second cap, in-memory only.
• Store listing documents the VpnService use explicitly.
• No feature changes.