NetGlobe is live on the Microsoft Store·Download for Windows now
Features

Five surfaces. One window.

NetGlobe unifies what was previously a stack of disconnected tools — netstat, traceroute, WHOIS, MTR, threat feeds, speed tests, certificate inspectors — into a single live map of what your machine is actually doing on the internet. No browser tabs. No copy-pasting IPs. No alt-tabbing.

01 · Live mapping

Every outbound socket, on a map, in real time.

NetGlobe enumerates every open TCP and UDP connection on your machine, resolves the remote endpoint against a local GeoIP database, and renders each one as a live arc on a 2D world map or 3D globe. The map refreshes continuously as connections open and close — no polling, no waiting.

  • Local-first GeoIPBundled GeoIP database. Lookups never leave the device.
  • 2D & 3D viewsFlat world map for working sessions, cinematic globe for situational awareness.
  • Encryption-aware arcsArcs colored by TLS / plaintext so unencrypted traffic stands out at a glance.
  • Process attributionHover any line to see which app or service opened it — and which parent process launched that.
Live NetGlobe main window: a dark world map with live cyan arcs from a single machine to endpoints in North America and Europe, alongside a right-rail Endpoint Focus panel showing San Francisco, Anthropic PBC, and a low-trust score breakdown for the selected process.
02 · Endpoint focus

One click — everything you need to know about that connection.

Every line on the map is a pivot point. Click any connection and NetGlobe's right rail re-attaches to that endpoint — process, network owner, certificate chain, route, MTU, and trust score, all in one place. No tab-switching. No copy-pasting IPs into ten different web tools.

  • WHOIS / RDAP, inlineNetwork owner, range, registration date. Fetched on click, cached locally.
  • TLS certificate peekIssuer, validity window, subject alt names, ciphersuite — without leaving the panel.
  • Process trust scoreUnsigned binary? Launched by svchost? Running from Program Files? You see it.
  • Path MTU & reverse DNSOne click. No external tooling. Cached so repeat lookups are instant.
Endpoint Focus NetGlobe Endpoint Focus panel showing a pinned trace to www.yahoo.com: trace mode banner, summary stats (6 of 8 hops, 9 ms final hop RTT, 50 ms total across 7 hops, 7 ms average), a scrollable per-hop list with private hops and timeouts called out, the resolved hostname ec2-3-15-57-50.us-east-2.compute.amazonaws.com, and a row of one-click actions: Refresh Trust, Peek TLS Cert, WHOIS / RDAP, Path MTU, and MTR Live.
03 · Threat intelligence

If it shouldn't be there, NetGlobe sees it first.

Every connection is checked against curated threat-intel feeds — FireHOL Level 1/2, Spamhaus DROP/EDROP, Tor exit nodes, and ThreatFox IoCs. Hits are flagged on the map the moment they appear, with the matching feed and severity in the focus panel. Every feed is auditable in Settings: you can disable any of them, repoint to a private mirror, or swap in your own.

  • 15,000+ indicatorsRefreshed in the background. Hits cached locally between refreshes.
  • BGP & outage signalsLive feeds from IODA and IHR surface wider internet-health context your local view can't see.
  • Bring-your-own feedEvery feed URL is configurable. Mirror them in your perimeter, or roll your own JSON list.
Internet Health Internet Health Intelligence panel showing global routing, outage, and BGP path-instability indicators sourced from IHR. Eight critical signals across UA, US, RU, TR, BR, AR, DE, and ID with severity scores and affected networks.
04 · Pro diagnostics

The full network-engineer toolkit, baked in.

When something is slow, broken, or behaving oddly, NetGlobe ships with the tools to figure out why — without leaving the app, dropping to a terminal, or pasting outputs into a ticket.

  • Traceroute & MTRHop-by-hop loss and latency, refreshing continuously. Watch a flaky link in real time.
  • Speed test & iperf3Pick a public test server or point at your own iperf3 endpoint for accurate throughput numbers.
  • Port scanningTCP and UDP probes against any host — see what's actually reachable from your machine.
  • Path MTU discoveryFind the largest packet that survives the path — useful for VPN and tunneling weirdness.
MTR Live Pro Diagnostics MTR Live modal: target 160.79.104.10, 9 iterations, 7 hops, with per-hop sent / loss / last / avg / best / worst / stddev columns showing a clearly degraded mid-path hop at 60% loss.
05 · Privacy architecture

Runs entirely on your machine. No exceptions.

NetGlobe is a single local binary. It opens a tiny HTTP server only on 127.0.0.1, talks to its own UI in your browser, and exits when you do. There is no account to make, no cloud to sync with, no telemetry pipe. The only outbound calls are the third-party feeds you explicitly enable — every one of them auditable, repointable, and disable-able from Settings.

  • No accounts, everInstall, run, use. There is nothing to sign up for.
  • No telemetryYour network data never leaves the machine. Not in aggregate. Not anonymized. Not ever.
  • Auditable outboundEvery external URL the app might call is listed in Settings. Disable, swap, or mirror at will.
  • Local-first GeoIPA GeoIP database ships in the box. The internet doesn't need to know you're looking something up.
See it in action

Real surfaces. Real data. Captured live.

These are screenshots from a running build of NetGlobe — not concept art. Same UI on macOS and Windows.

3D globe view NetGlobe 3D globe rendering centered on the Americas, overlaid with the global submarine-cable network as fine orange lines and live cyan and mint connection arcs arcing out from the user's location, with a small 2D mini-map pinned at the bottom for orientation.

The cinematic globe view. Submarine cables, live arcs, and a thumbnail of the 2D map pinned at the bottom for orientation. Same data as the flat map — just easier to feel at scale.

Regional latency Regional Latency view: average RTT to a backbone broken out by region, with a sortable list of cities on the left and a world map of measured links on the right. Tokyo, Auckland, and Saint Petersburg are highlighted in red as the worst latencies.

Regional latency, not a single average.

A Tokyo blip doesn't get buried in a global mean. Sort, pin, and watch the regions that matter to you.

DNS & threat feeds DNS History and Threat Feeds dialog. Left side: every hostname your machine has resolved in the last 24 hours with hit counts and last-seen timestamps. Right side: the live status of every threat-intel feed NetGlobe has loaded — FireHOL Level 1, Spamhaus DROP / EDROP, ThreatFox, and the Tor exit list — with rule counts and last refresh times.

DNS history meets threat intel.

Every host your machine has resolved in the last 24 hours, alongside the status of every threat-intel feed currently loaded. One dialog, full provenance.

At a glance

Built for the way networks actually work.

NetGlobe is a single self-contained binary. No agent. No daemon. No background service that lingers after you quit. Here's what you're getting.

Platforms

macOS 11+ (Apple Silicon + Intel)
Windows 10+ (x64)

Shipping to the Mac App Store and Microsoft Store.

Install footprint

~40 MB on disk, single binary

Lives in %LOCALAPPDATA%\NetGlobe\ · no admin prompt

Privileges

Standard user — no kernel driver, no NDIS hook

Reads sockets via OS-native APIs (netstat / lsof)

Network

Localhost-only HTTP server on 127.0.0.1:4127

Outbound calls are opt-in feeds only

UI

Browser-native · vanilla JS · no npm runtime deps

Opens in your default browser; no Electron, no embedded webview

Data

Stays on the device. Bundled GeoIP database.

No cloud sync. No account. No analytics beacon.
Available now

Get NetGlobe.

Live on the Microsoft Store. The Mac App Store version is coming soon.

Get it from the Microsoft Store Live Coming soon to the Mac App Store Soon

No account. Runs entirely on your device.

Mac App Store

Waiting for the Mac version?

Drop your email and we'll send one note the day NetGlobe lands on the Mac App Store. No marketing, no sequence.

You're on the list. We'll be in touch the day the Mac version ships.

Unsubscribe is one click.

Questions? info@vandien.io · Support: support@vandien.io