Wireless Reconnaissance Platform

Trace every signal.
Document every site.

Passive wireless security analysis and documentation for security engineers, network auditors and anyone responsible for a network. In the browser today, with apps for iPhone, iPad, Mac, Android and Windows in testing.

tracewaves — scan results
❯ python3 tracewaves-agent.py --install

# Discover → Scan: 14 networks found

SSID BSSID CH SEC RSSI GRADE
CorpNet-5G A4:CF:12:9B:3E:01 36 WPA3 -42 A
Guest-Lobby DE:AD:BE:EF:CA:FE 6 WPA2 -51 C
FreeWiFi 00:1A:2B:3C:4D:5E 36 OPEN -48 F
Printer-4200 B8:27:EB:A1:B2:C3 11 WEP -63 F

⚠ WPS enabled: Guest-Lobby (brute-force risk)

# Journal → New Entry (GPS, tags)
✓ Entry saved + synced SHA-256: 7f83b1...

6 Analysis Pillars
Sync Across Devices
SHA-256 Evidence Integrity
CVE Intelligence
GPS Tagged Records

Capabilities

Six pillars of
wireless intelligence

A complete workflow from passive discovery through tamper-evident documentation — every step designed for the field.

Discover

See every Wi-Fi network in range with signal, security, vendor and an A–F risk grade. The browser uses a tiny local agent or an imported scan; the Mac, Android and Windows apps scan directly. Bluetooth LE too.

Inspect

Drill into any access point: security configuration, vendor, risk flags and the reasoning behind its grade.

Verify

Check the connection you're on: server reachability, API health and round-trip time, with no third-party test sites. The native apps add DHCP, DNS and captive portal checks.

Analyze

In the native apps: interfaces, addressing, DNS and the services devices advertise on the network you're connected to.

Assess

Risk scoring backed by daily NVD CVE data and the CISA Known Exploited Vulnerabilities list. Open, WEP and actively exploited findings can't hide behind a good average.

Journal

Tamper-evident field records: GPS-tagged and filterable by tag and severity, each with a server-verified SHA-256 observation hash. Syncs across your devices.


Built In

More than a scanner

Track how a site changes over time, keep your work in step on every device, and stay strictly passive while you do it.

Forensics

Record scan sessions, save a baseline and compare against it. A timeline of findings, your own alert rules, and case bundles sealed with SHA-256 hashes and a digital signature.

Sync

Everything works signed out and offline. Sign in and your journal, sessions, baselines, findings, alert rules and settings follow you. Cases sync only when you turn it on for that case.

One Account

Sign in with Google, Apple, Microsoft or GitHub, a passkey, or a link sent to your email. Methods that prove the same email address open the same account. No password to keep.

External Scanner

iPhone and iPad can only see the network they're on. Pair an external scanner, such as a laptop or Raspberry Pi running the TraceWaves scanner program, to list nearby networks and save them as a session. Every other app can use one too, as a second radio.

Passive and Private

TraceWaves lists what's on the air. It never joins a network to test it, captures traffic or cracks anything. No ads, no analytics, no tracking, and scans stay on your device unless you sync.

Themes

Radar, Night Vision, Prism and Daylight, plus Color-Blind Safe and High Contrast, so the screen suits a dark server room or direct sun.


Workflow

From scan to evidence

Three steps. One tool. Every finding documented with cryptographic integrity before you leave the site.

01

Scan

Arrive on site and scan. Every Wi-Fi network in range is listed in seconds, along with nearby Bluetooth LE devices.

02

Analyze

Automatic risk grades, vendor identification and CVE context. Every finding is ranked and explained.

03

Document

One tap to create a GPS-tagged, SHA-256 hashed journal entry. It works offline and syncs when you're back online.


Latest Build

See it running

Version 1.0.0 as it stands in testing on October 11, 2026. Every screen below shows sample data, not a real site.

TraceWaves on iPhone: the connected network with a B grade, its security mode, address, vendor, signal and band.
Connected Network
TraceWaves on iPhone: six nearby networks listed by a paired external scanner, each with a grade, security mode and signal.
Nearby Networks From an External Scanner
TraceWaves on iPhone: two recorded scan sessions with counts of access points, Bluetooth devices and local devices.
Recorded Sessions
TraceWaves on Mac: the External Scanner tab listing six networks from a paired scanner, with a Save as Session button.
Mac: External Scanner
TraceWaves on Mac: a forensic case with a verified chain of three artifacts, custody log and export options.
Mac: Case With a Verified Evidence Chain

Cross-Platform

One tool. Every platform.

Works offline in any modern browser. Sign in to sync your work between devices.

Web App (Available Now)
iPhone and iPad
Mac
Android
Windows

→ Web app available now · iPhone, iPad, Mac, Android and Windows apps in testing, not yet in the app stores · Getting Started guide

What Each App Can Do

Phones and browsers limit what an app may see. Apple lets an iPhone or iPad app read only the network it's connected to, so listing nearby networks there needs an external scanner. Everything is passive on every platform.

CapabilityWebiPhone and iPadMacAndroidWindows
List Nearby Wi-FiWith the local agent or an imported scanWith an external scannerYesYesYes
Connected Network DetailsNoYesYesYesYes
Bluetooth LE DevicesChrome and Edge, one at a timeYesYesYesYes
External ScannerBluetooth (Chrome, Edge)Bluetooth or networkBluetooth or networkBluetooth or networkNetwork
Plugged-In Wi-Fi AdapterThrough the local agentNoAdapters macOS supportsNoYes
Risk Grades and CVE MatchingYesYesYesYesYes
Connection Checks (Verify)Reachability and latencyYesYesNoYes
Network AnalyzerNoYesYesNoYes
Channel ViewNoNoYesYesYes
JournalYesYesYesYesYes
Forensics and CasesYesYesYesYesYes
Sync and Sign-InYesYesYesYesYes
AvailabilityNowIn testingIn testingIn testingIn testing

Ready to trace the airwaves?

See what your wireless environment really looks like.

Get Started