Live, per-process visibility
Every app that touches the network, by name — with the host, country, service, and live up/down rates. No guessing which "svchost" is which.
Windows network monitor & firewallSee every connection.
See every connection.
Block what you don't trust.
NetSecWall shows every app on your PC talking to the internet — live, by name, with where it's going and why. When something looks wrong, one click blocks it, instantly and for good.
7-day free trial · no card, no sign-up · runs entirely on your PC · telemetry is opt-in
The whole machine, at a glance
↓ live recreation — flip the theme toggle; the app has both too
42processes watched
211live connections
<1%CPU · stays light
0packets sent anywhere
What it does
A network analyzer and a firewall, in one quiet app.
NetSecWall sits on your PC and watches the wire. Everything it can see, you can act on.
Block it, and mean it
Stop any app by name, address, or country — at the Windows Firewall or a deeper level. It keeps working even when another security app is already in charge.
Ask-to-connect
When a new app first reaches the internet, a quiet corner notification asks: Allow, Allow once, or Block. Apps you already trust never ask again.
Catches what looks wrong
Flags suspicious programs, quiet background chatter, and known-bad destinations — and explains, in plain language, why it flagged them.
Every site an app visits
See the sites each app looks up, with history and how new the site is — so a "photo editor" calling a stranger you've never heard of stands out.
One rule editor
Manage every Windows Firewall rule — Windows, third-party, and NetSecWall — from a single editable list. NetSecWall becomes your single source of truth.
A closer look
Follow every connection to where it goes.
Beyond the list, NetSecWall draws the picture — which apps share which endpoints, and which of those you should worry about.
An interactive map of your traffic
- Your apps and the places they connect, drawn as a live map — bigger dots mean more traffic.
- Shared destinations that two or more apps talk to are flagged in amber — a classic sign worth a second look.
- Known-bad places light up red.
- Zoom, pan, and double-click anything to dig in — group by address, site, network, or country.
Trusted or not
Every program is checked for a valid digital signature — you see signed, unsigned, or tampered, right in the row.
Where it’s going
Each connection is tagged with its country and the company that owns the other end, so an odd destination jumps out.
History & reports
A searchable record of what talked to what, a timeline you can scrub through, and a one-click weekly report of your top apps and destinations.
Spots hidden check-ins
Flags steady, clock-like traffic — the tell-tale sign of something quietly phoning home in the background.
Block places & categories
Block a whole country, or categories like ads and trackers, from lists you can edit and add to.
Runs quietly
Light on your PC, tucked in the tray, and able to keep watching around the clock. Comes in light and dark for long sessions.
Firewall control
A real firewall — the calm kind.
See something you don’t like, and stop it. Permanently, for an hour, or everything at once. However another security tool is set up, NetSecWall fits alongside it.
Two ways to block
Stop an app at the Windows Firewall, at a deeper level, or both at once — so a block sticks even when another security app is in charge.
One list for every rule
See and edit every firewall rule on your PC — Windows’ own, other apps’, and yours — from a single editable list. NetSecWall becomes the source of truth.
Rules per network
Separate rules for home, work, and public Wi-Fi — and turn the firewall on or off for each network, right from NetSecWall.
Block for now
Cut an app off for 10 minutes or an hour, then let it back automatically — useful when something turns unexpectedly chatty.
Cut it off instantly
Blocking closes the connection that’s already open — not only the next one — so the noise stops the moment you click.
Panic switch
One click blocks all internet access. Flip it back when you’re ready. Built for the moment when something is wrong and everything has to stop.
Tamper-proof rules
If something tries to quietly switch off a NetSecWall rule, NetSecWall puts it right back.
Plays well with others
Already run another firewall manager? Companion mode lets NetSecWall keep watching and blocking without stepping on it.
For teams · Enterprise Beta
On-prem management for your whole fleet.
Run the NetSecWall Management Server inside your network: enroll every endpoint, deploy policy with a wizard, push silent updates — no cloud dependency, ever.
Your server, your data
A self-hosted management console for your whole fleet — agents, groups, licensing, and analytics on a single on-prem box. Nothing leaves your network.
Policy deployment wizard
Pick a template — Balanced, Strict, Kiosk, or Monitor-only — adjust it, choose target groups, and roll it out to the whole fleet in one guided flow.
One-file onboarding
The server generates a netlens-mgmt.json bootstrap file. Import it in the app — or drop it beside a silent GPO/Intune install — and the device enrolls itself.
Silent update push
Publish a release once and push it fleet-wide: SHA-256-verified, silently installed, with a per-device version trail and compliance quarantine for stragglers.
mTLS-hardened agents
Every agent gets its own client certificate from the server's internal CA, with rotation and revocation built in. Remote commands arrive in near real-time.
Seat-based licensing
Activate the server with one Enterprise key and it meters seats itself — block a device to free its seat. Works fully offline after activation.
Explore NetSecWall Enterprise
One key activates your server with 25 seats — from $299/yr. In beta: set up with our sales team, not self-service.
Pricing
Free for 7 days. Then pick a plan.
Every install starts with a 7-day trial — every feature unlocked, no card, no sign-up. There's no free tier after that. Choose the tier that matches what you want NetSecWall to do, and pay monthly or yearly — whichever suits you.
Every plan is sold monthly or yearly — pick one:
BetaIntroductory pricing. Family and Pro are in beta: the price is reduced, and in exchange a bug found in a beta plan is fixed in a following build rather than refunded. The 14-day change-of-mind guarantee is unaffected. Read the terms →
Prices shown per device · cancel any time · the trial can't be reset by reinstalling.
We accept
- AMEX
- Pay
- Pay
Secure checkout · your card details never touch our servers. Orders are handled by our reseller Paddle.com Market Ltd, the Merchant of Record. Available methods vary by country.
Telemetry you control
Off by default. Anonymous when on.
A network tool that watched you would defeat the point. NetSecWall works fully offline. Product analytics are strictly opt-in and tied to a random ID that isn't linked to you. You can export or erase everything with one click, any time.
GDPRCCPA / CPRAAPPIPDPA
✓ If you opt in, we collect
- App version, Windows version, CPU architecture, and UI language
- Coarse country from your Windows region — your IP is never stored
- Anonymous feature-usage counts (which features, not their contents)
- Bucketed configuration: engine, mode, rule-count band
- Crash and error categories
✕ We never collect
- Your traffic, domains, DNS queries, or connection details
- Names or paths of your applications
- Firewall rule contents or any allow / block lists
- Any name, email, account, or hardware identifier
Your rights are in the app under Help ▸ Privacy & telemetry: turn analytics on or off, or send an instant erase request (GDPR Art. 17, CCPA/CPRA delete, APPI & PDPA withdrawal).
Get NetSecWallInstall it. Watch for a minute.
Install it. Watch for a minute.
You'll see things you didn't know were talking.
Windows installer — run it and you're done · the 7-day trial starts itself, no key needed
sha256: 07f08b7aa95caaedada11d8af63d2e6ccad8de1e60313967fe97b6f1ca3db008
Requires administrator rights to capture traffic and manage the firewall. NetSecWall runs locally; no account or sign-in.
Deploying across a fleet? The installer supports unattended installation — see silent install and exit codes.
Questions
Straight answers.
How long is the trial, and what happens when it ends?
Every install unlocks everything for 7 days — no card, no sign-up, nothing to activate. The trial is tied to the device, so reinstalling won't restart it. When it runs out, there is no free tier to fall back on: pick a plan (from $5/mo) and paste the key into the app. Whatever NetSecWall has already recorded stays on your PC either way.
Can I pay monthly, or is it yearly only?
Either. Every plan has a monthly and a yearly price, and paying yearly costs 10 months instead of 12. You can cancel at any time, and there is a 14-day money-back guarantee if you change your mind.
Why are Family and Pro marked beta?
They carry the newest parts of NetSecWall — parental controls, the WFP packet-filter engine, and our hosted feeds — and we're still hardening them. That's why they're on introductory pricing: you pay a reduced price. In exchange, a bug found in a beta plan is fixed in a following build rather than refunded. The 14-day change-of-mind guarantee is unaffected.
Will it slow down my PC?
It shouldn't. NetSecWall watches quietly in the background instead of sitting in the middle of your traffic, so monitoring stays light. Blocking does work only when you block something.
Do I need administrator rights?
Yes. Windows requires elevation both to see per-process network activity and to change firewall rules, so NetSecWall runs elevated. It does not create an account or ask you to sign in.
Will it fight with my existing firewall?
No. If another manager (Windows Firewall Control, GlassWire, a third-party suite) already owns the Windows Firewall, switch NetSecWall to Companion mode. It keeps monitoring and can still block on its own, without touching the other tool's rules.
What leaves my computer?
By default, nothing. NetSecWall works fully offline. Product analytics are opt-in, anonymous, and never include your traffic, domains, app names, or rules — see the Privacy section above.
Can it keep protecting me with the window closed?
Yes. Closing the window minimizes to the tray and keeps monitoring. For always-on coverage — even before you sign in — install the optional 24/7 background service from the setup wizard.
Which Windows versions are supported?
Windows 10 and 11, 64-bit. NetSecWall is built specifically for Windows, so it's Windows-only by design.
How do I delete the data I've sent?
Open Help ▸ Privacy & telemetry and choose erase — the app sends an immediate deletion request and everything tied to your anonymous ID is removed. You can also opt out of analytics entirely with one switch.