Frequently asked.

NetGlobe shows every outbound network connection from your machine on a live map, geolocated in real time. Click any connection and you get the process behind it, the network owner, the TLS certificate, route, MTU, a trust score for the process, and any threat-feed matches.

It also includes a full diagnostics toolkit — traceroute, MTR, speed test, iperf3, port scan, path MTU — so you don't need to switch to a terminal to diagnose a slow site or a flaky link.

Anyone who wants to actually see what their machine is doing on the internet. That includes developers and network engineers who use the diagnostics toolkit daily, security-minded users who want threat-feed checks on every connection, and curious people who simply want to know what their computer is talking to.

A firewall decides what to allow. netstat dumps a snapshot of sockets in a terminal. NetGlobe is the lens in between: a live, geolocated view of everything that's happening, with process attribution, threat-intel enrichment, and built-in diagnostics — designed so you can reason about network behavior, not just block it.

NetGlobe reads socket state through OS-native APIs at a low refresh rate and does the heavy work (GeoIP, threat-feed checks, WHOIS) on demand. Idle CPU and memory cost are negligible. Active diagnostics (MTR, iperf3, speed tests) use bandwidth only while they're running.

No. NetGlobe runs as a single local binary, opens an HTTP server only on 127.0.0.1, and ships with a local-first GeoIP database. There are no accounts, no telemetry, no cloud sync.

The only outbound calls are the third-party threat-intel and outage feeds you explicitly enable in Settings — every one of which is auditable, repointable, and disable-able.

None. Not aggregated. Not anonymized. Not on first launch. Not ever. NetGlobe does not phone home. If you'd like to verify that, the only outbound URLs the app may call are listed in Settings → External Endpoints (advanced), and every one of them is something you've explicitly enabled.

Configuration, cached WHOIS results, and threat-feed snapshots are kept in a local directory inside your user profile. Nothing is uploaded. If you uninstall NetGlobe, removing that directory removes everything it stored.

Yes. Every external URL NetGlobe might call is listed in Settings → External Endpoints (advanced). You can disable individual feeds, repoint any of them to a private mirror, or swap them out entirely.

Windows 10 or later on x64 — available now on the Microsoft Store. The macOS 11 or later build (Apple Silicon and Intel) is coming to the Mac App Store soon — both versions are built from the same source and will have feature parity.

No. NetGlobe reads socket state via OS-native APIs (netstat -ano on Windows, lsof on macOS) and runs as a standard user. There's no kernel driver, no NDIS hook, no privileged daemon, and no admin prompt at install.

About 40 MB on disk, including the bundled GeoIP database. NetGlobe is a single self-contained binary — no separate runtime to install.

Linux is on the roadmap. If that's something you need, send a note to info@vandien.io with your distribution and use case — it helps us prioritize.

Trust scoring combines several signals into a 0-100 number per process: code-signing status, file age on disk, install location, parent-process attribution, and a handful of others. The focus panel shows both the score and the reasoning — so a low score isn't a mystery, it's an explanation.

By default, the following feeds are queried periodically and cached locally between refreshes:

• FireHOL Level 1 and Level 2
• Spamhaus DROP and EDROP
• The Tor exit node list
• ThreatFox indicators of compromise
• IODA and IHR for internet-health and outage context

Every feed URL is configurable in Settings. Disable, mirror, or swap in your own list.

Both. NetGlobe enumerates TCP and UDP sockets, geolocates the public remote endpoints, and shows them on the same map. Loopback and link-local traffic are hidden by default to keep the view focused on internet-facing activity.

Threat feeds can produce false positives. The focus panel shows which feed flagged the connection and what severity it assigned, so you can judge for yourself. If you find a consistent false-positive pattern, send it to support@vandien.io — we tune the defaults based on real-world reports.

See the Microsoft Store listing for current pricing on Windows. The Mac App Store listing will show the macOS price when that version launches. NetGlobe is built by Van Dien io as a sustainable, one-time-purchase product — there is no subscription required for the core mapping and diagnostics surfaces.

Trial terms will follow the conventions of whichever store you install through. The exact details will be on the listing at launch.

If you're looking to deploy NetGlobe across a team or fleet, email info@vandien.io with your size and use case — we'll work something out.

Email support@vandien.io for any product issue — installation, crashes, false positives, feature requests. We read and reply to every message.

For general or commercial questions (licensing, partnerships, press), email info@vandien.io.

Through the platform store you installed it from — the Mac App Store on macOS, the Microsoft Store on Windows. The app itself doesn't run a separate auto-updater or phone home for updates.

Email support@vandien.io with the version (Settings → About), your OS, and the steps to reproduce. Screenshots help. We don't have a public issue tracker yet, but the support inbox routes directly to the engineering team.

Yes — please. support@vandien.io is the right inbox. The roadmap is informed by what people actually ask for.