Egress Recon vs Network Scanner Toolkit

You are on a guest Wi-Fi you did not choose. Something will not connect and nobody can tell you why. Egress Recon answers that from your phone, in under a second. WHICH PORTS GET OUT Sixteen common outbound ports, tried against real public services. You get more than "open" or "closed": • Refused and timed out are different answers. One means something on the network actively rejected the connection; the other means it was dropped silently. • Intercepted is its own finding. The connection succeeded, but the thing that replied was not the service you asked for — a portal, a proxy, or a middlebox re-signing TLS. WHAT NAT YOU ARE BEHIND Your public address, and whether your NAT gives you a reusable mapping or a symmetric one — the reason a video call falls back to a relay. Carrier-grade NAT is reported with its confidence and the evidence behind it, never as a bare label. IPv6 and NAT64 state, and whether you can reach your own public address from inside. WHAT IT DOES TO DNS Whether plain DNS gets out. Whether the network's resolver agrees with a public one. Whether it invents answers for names that cannot exist. And whether DNS over HTTPS and DNS over TLS still work when plain DNS does not — each tested with a real query, not just a connection. WI-FI VERSUS CELLULAR The most useful thing a network tool can tell you is "this Wi-Fi blocks it, and your cellular connection does not." Egress Recon runs the same tests over both and shows the difference — attributing it correctly in both directions, because blaming the café for something your carrier blocks helps nobody. BEHIND A CAPTIVE PORTAL It tells you the portal is there, shows the URL it is pushing you to, and labels the results "before you sign in." Sign in, run again, and it shows you exactly what changed. IT SHOWS ITS WORK Every verdict comes with what was actually observed: the banner the server sent, the certificate it presented and who issued it, the exact response that came back. You can check the reasoning instead of trusting a colored label. Where something cannot be determined, it says so and why. Two ports in the standard set have no public server to test against, so they stay untested rather than showing a red cell that means nothing. Share any run as text, a web page, a PDF, or JSON. Saved runs are grouped by network. PRIVACY • No analytics, no telemetry, no accounts, no ads, no third-party SDKs. • It never scans your network. Every probe goes to a public internet service — never your router, never your other devices. That is why it never asks for local network permission. • It does not read your Wi-Fi name. That needs location permission, which it never requests. • Saved runs stay on your device. A report leaves only when you share it. Egress Recon for Mac and for iPhone and iPad are both free apps on one App Store record. Requires iOS 17 or iPadOS 17.

See every device on your WiFi. Free — no ads, no subscription. Network Scanner Toolkit finds everything on your network in seconds: name, IP, MAC address, and manufacturer (on iOS 27 and later) — even devices that hide from ping. Many devices tell you exactly what they are: Apple TV, HomePod, Chromecast, printers, HomeKit and Matter accessories, Sonos, Fire TV and more. One-letter capability tags show you at a glance which devices are pingable, run a web interface, speak Bonjour, UPnP or Matter, or serve as your gateway. Filter the list by Web UI, SSH, file shares, printers, TVs, smart home or cameras. Tap any device to ping it, open its admin page in-app, connect over SSH, VNC or SMB, rename it, favorite it, or mark it for later. New devices get flagged automatically, so an unfamiliar gadget on your WiFi never slips past you. A full network toolbox — free: • LAN Scanner — fast sweep with smart device naming, models and manufacturers, custom names & icons, new-device badges, filters and quick-connect. Scans your Wi-Fi, Personal Hotspot or a wired adapter, and keeps going after you leave the app (iOS 26+). • Subnet Tools — IPv4 and IPv6. Type any address with a prefix, netmask or wildcard and get the whole answer on one card: network, broadcast, host range, counts, address type with its RFC, binary with host bits highlighted. Then explore: child subnets on a visual map, a VLSM planner, overlap checker, supernet, membership test, range-to-CIDR, config lines, IPv6 forms and a netmask table. Works as a Siri Shortcut too. A tool most paid apps don't have. • Port Scanner — presets, custom ranges, or all 65,535 ports • Traceroute — every hop geolocated on a live map with latency charts • Ping — live graph, configurable payload size and interval • DNS Lookup — A, AAAA, MX, TXT, CNAME, NS, SOA, PTR & SRV records, custom resolvers, DNSSEC check • Whois — full registry data with referral chasing • Bonjour Monitor — watch services appear and disappear in real time • Network Info — IP, router, DNS, IPv6, data usage, SSID • History — every scan and test saved automatically; reopen scans as fully interactive device lists Toolkit Pro — one purchase, yours forever: • Find Cameras — sweep your network for security cameras using RTSP, ONVIF, and vendot three-tier confidence ratings. Know what's watching on any WiFi you join. • MAC Explorer — paste any MAC address in any format and see its vendor and IEEE registry block, address bits, known reserved uses, every notation, and the IPv6 address it implies. Give devices your own names and vendors, and search the registry by maker. • Speed Test — live download and upload graphs in Mbps and MB/s, your latency idle vs. under load with a bufferbloat grade from A+ to F, and your ISP • Security Audit — audit your own network's security to find risky or exposed service forwards to the internet • Bluetooth Scanner — scan for nearby Bluetooth Low Energy devices, see their signal strength, maker, and type, and use Find mode's hot/cold proximity meter or the radar view to locate one • Wake-on-LAN — power on your PC or NAS from the couch • Export & share — CSV and PDF reports of any scan or test • Themes — Phosphor, Amber, Synthwave, and more Private by design. No account, no analytics, no tracking — your scans and history nev Whether you're a network engineer, a tinkerer, or you just want to know what that myss — this is the scanner that respects both your time and your wallet. Download free. Upgrade once if you want the Pro tools.