Border0 Client vs Egress Recon

Border0 provides secure, zero-trust access to your organization's private network, services, and resources from anywhere. SIMPLE & SECURE CONNECTION Connect to your Border0 network with a single tap. Your credentials are securely stored and connections are established instantly. No complex configuration required. ACCESS YOUR SERVICES Reach internal services, databases, servers, and applications as if you were on your office network. Border0 handles the secure tunneling automatically. EXIT NODES Route your internet traffic through exit nodes in different locations. Choose where your traffic appears to originate from, or use direct routing when you don't need an exit node. PEER-TO-PEER CONNECTIVITY Connect directly to other devices and peers on your Border0 network. Access colleague's shared resources securely. NETWORK DIAGNOSTICS Built-in tools to troubleshoot connectivity: • ICMP Ping to test host reachability • TCP connectivity tests to verify service availability • DNS resolution checks • Public IP verification WIDGETS & QUICK ACTIONS • Home screen widgets show your connection status at a glance • Lock screen widgets for instant visibility • Long-press the app icon for quick connect/disconnect • Switch exit nodes directly from Quick Actions MULTI-ORGANIZATION SUPPORT Manage access to multiple Border0 organizations from a single app. Easily switch between work, personal, or client networks. PRIVACY FIRST Border0 uses modern cryptography and zero-trust principles. Your traffic is encrypted end-to-end. REQUIREMENTS • A Border0 account and organization • iOS 16.0 or later Visit border0.com to learn more about Border0 and create your organization.

You are on a guest Wi-Fi you did not choose. Something will not connect and nobody can tell you why. Egress Recon answers that from your phone, in under a second. WHICH PORTS GET OUT Sixteen common outbound ports, tried against real public services. You get more than "open" or "closed": • Refused and timed out are different answers. One means something on the network actively rejected the connection; the other means it was dropped silently. • Intercepted is its own finding. The connection succeeded, but the thing that replied was not the service you asked for — a portal, a proxy, or a middlebox re-signing TLS. WHAT NAT YOU ARE BEHIND Your public address, and whether your NAT gives you a reusable mapping or a symmetric one — the reason a video call falls back to a relay. Carrier-grade NAT is reported with its confidence and the evidence behind it, never as a bare label. IPv6 and NAT64 state, and whether you can reach your own public address from inside. WHAT IT DOES TO DNS Whether plain DNS gets out. Whether the network's resolver agrees with a public one. Whether it invents answers for names that cannot exist. And whether DNS over HTTPS and DNS over TLS still work when plain DNS does not — each tested with a real query, not just a connection. WI-FI VERSUS CELLULAR The most useful thing a network tool can tell you is "this Wi-Fi blocks it, and your cellular connection does not." Egress Recon runs the same tests over both and shows the difference — attributing it correctly in both directions, because blaming the café for something your carrier blocks helps nobody. BEHIND A CAPTIVE PORTAL It tells you the portal is there, shows the URL it is pushing you to, and labels the results "before you sign in." Sign in, run again, and it shows you exactly what changed. IT SHOWS ITS WORK Every verdict comes with what was actually observed: the banner the server sent, the certificate it presented and who issued it, the exact response that came back. You can check the reasoning instead of trusting a colored label. Where something cannot be determined, it says so and why. Two ports in the standard set have no public server to test against, so they stay untested rather than showing a red cell that means nothing. Share any run as text, a web page, a PDF, or JSON. Saved runs are grouped by network. PRIVACY • No analytics, no telemetry, no accounts, no ads, no third-party SDKs. • It never scans your network. Every probe goes to a public internet service — never your router, never your other devices. That is why it never asks for local network permission. • It does not read your Wi-Fi name. That needs location permission, which it never requests. • Saved runs stay on your device. A report leaves only when you share it. Egress Recon for Mac and for iPhone and iPad are both free apps on one App Store record. Requires iOS 17 or iPadOS 17.