DNSSEC vs Socketta

DNSSEC routes your device's DNS queries through a DNSSEC-validating resolver — in one tap, without a VPN. Modern DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT) encrypt your queries in transit. DNSSEC validation at the resolver ensures the answers haven't been tampered with. Together they make DNS the private, trustworthy channel it was always meant to be. BUILT-IN DNS4EU PRESETS DNS4EU is the European Commission-backed public resolver network. Four presets ship with the app: • Protective — blocks malware and phishing domains • Protective + Ad Blocking — adds tracker and ad filtering on top • Protective + Child Protection — adds adult content filtering • Unfiltered — encrypted and DNSSEC-validating, no content filtering Pick a preset and tap Apply. iOS will prompt you once to allow the DNS profile, then it's active system-wide. YOUR OWN RESOLVER Prefer a different provider? Add any DoH or DoT endpoint: • Enter a DoH URL (https://…) or a DoT hostname • Optionally add fallback IP addresses for bootstrapping • Flag it as DNSSEC-validating to track which resolvers you trust Custom resolvers are stored on-device and never leave it. ONE TAP, SYSTEM-WIDE The profile installs via the operating system's built-in DNS Settings — no VPN tunnel, no proxy, no configuration profile to trust manually. Once applied, every app on your device uses the configured resolver. Remove it any time from within the app or from Settings › General › VPN & Device Management › DNS. WORKS EVERYWHERE Available for iPhone, iPad, Mac, Apple TV, and Apple Vision Pro.

See who's on your Wi‑Fi, check your network's security and keep a speed history — plus a full network bench. Everything is worked out on your device. No ads, no account, no tracking. WHO'S ON YOUR WI‑FI • Finds the devices on your network and names them from what they announce (Bonjour, UPnP, NetBIOS, web pages) and from your router's DNS: name, maker, model and type. A device that announces nothing is shown by its address • Changes since the last scan: devices that appeared and devices no longer seen SECURITY CHECK • A read-only check of your router and devices: reachable remote-login, file-sharing, screen-sharing and camera services, ports forwarded from the internet (UPnP), an admin page without HTTPS, DNS that answers for names that don't exist, and certificate validation • A score and grade, what each finding means, and what was and wasn't checked. It checks network settings — it is not a virus scan, and it never logs in or changes anything MEASURE • Speed test (Cloudflare): download, upload, latency, jitter and loss, kept with your provider's name, looked up on your device • TCP ping to any host and port (not ICMP), batch ping, a path check showing the destination's network operator, quality score and network diagnosis SCAN & DEVELOPER BENCH • LAN scanner (every host that answers a TCP probe), topology map, port scanner, DNS lookup, mDNS and UPnP browsers, scan diff, SSL viewer, WHOIS, HTTP headers, subnet calculator • HTTP/REST client with cURL/Postman import and code generation, WebSocket, MQTT, UDP/TCP, precision send, BLE central & peripheral, macros, profiles, schedules (while Socketta is open), export HONEST NOTES • iOS doesn't let apps read MAC addresses; devices are recognized by name, UPnP identity or address. Devices that answer nothing (phones asleep, firewalled PCs) can be missed • Socketta doesn't have Apple's multicast permission, so the UPnP browser asks each address directly and Wake-on-LAN sends to the device's IP address; some devices can't be found or woken this way • Ping is TCP: a closed port counts as loss. Local-network features need the Local Network permission. The speed test and the certificate check contact Cloudflare, and the DNS check asks your network's own DNS about two made-up names; nothing is sent to us FREE & PRO Free: unlimited device identification, changes since the last scan, 20 remembered devices on one network, the security score with every finding explained, speed test with the last 10 results, and the scanning and network tools; advanced tools have trial uses and a daily send allowance. Pro adds: alerts when a device never seen on that network before joins (while Socketta is open, or from the "Check This Network" Shortcuts action), a trusted list, device names and history, unlimited devices on every network, the device, port and step-by-step fix for each finding, re-check history and a report, the full speed history with a time-of-day chart and CSV export, and the advanced tools without limits. Weekly, monthly or annual subscription (free trial for new subscribers: 7 days on annual, 3 days on monthly and weekly) or a one-time lifetime purchase, charged to your Apple ID. Subscriptions renew automatically unless cancelled at least 24 hours before the period ends; manage them in Settings > Apple ID > Subscriptions. Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Privacy Policy: https://revot.jp/apps/netmaster/privacy.html Provider data: IP to ASN Lite by DB-IP.com (CC BY 4.0).