NetViz

Scan. Map. Monitor. Repeat.

NetViz

A free, open-source LAN scanner and network visualizer. Enter a CIDR, hit scan, and watch every device on your network stream in live — as a precise device list, groups by type, and a 3D map of your network. Windows and Linux.

No agents · no accounts · no Nmap · just run it.

Download NetViz

Grab the build for your platform from the latest release. The desktop app is ready to run — no Go, Node, or build tools required.

Windows builds are code-signed and timestamped; Windows SmartScreen may still ask for a confirmation (More info → Run anyway) until the app builds reputation. The Linux build is not signed: check it against its SHA-256 file. There is no prebuilt macOS download yet; NetViz builds from source on macOS. Every archive also ships the netviz-cli command-line scanner and a SHA-256 checksum.

Everything from one scan

NetViz validates your CIDR, runs a bounded native-Go TCP-connect scan of common LAN ports, enriches what it finds, and streams every observation into the views, exports, and history — all from the same live event stream.

Live discovery

Results appear as hosts are checked — no waiting for the sweep to finish. Cancel any time; scans stay responsive on a full /24.

Real vendor identification

Hostname resolution, MAC lookup from your ARP cache, and vendor names from an embedded snapshot of the full IEEE OUI registry — about 40,000 manufacturers — with a conservative device-type guess for every host.

Monitor mode

Re-scans on an interval and flags every device so you can watch the network move:

new online offline changed stable

Device details & history on click

Click any device for a detail panel with IP, hostname, MAC, vendor, type, open ports — and its stored timeline: when it was up, what ports it exposed, and when that changed.

Save, open & export

Save scans as versioned NetViz JSON and reopen them later, or export the table to CSV — straight from the File menu.

Local history & diff

Completed scans land in a local SQLite database — monitor cycles with no changes are merged, so history records state changes, not noise. History compares any two scans.

Built-in updates

The app checks GitHub Releases, downloads on your say-so, verifies the SHA-256 checksum, and installs in place — keeping the previous version as a backup.

Four ways to read your network

The same monitored /24 in every view — a precise device list, groups by type, a 3D map, and the history diff. Light and dark themes follow your system. Click any snapshot for the full-size view.

Devices

The precise operational view: address, name and vendor, what changed in the latest pass, type, open ports, MAC, first and last seen. Columns fit the window instead of scrolling sideways, and addresses that never answered stay out of the way until you ask.

Groups

One card per device type that is actually present — network gear, Windows, Linux and IoT, printers, cameras, web appliances — with changes called out on each device.

Topology

The gateway at the center and every device type as its own cluster around it. Taller devices have more open ports. Orbit, zoom, double-click to fly to a device, or switch to the flat map. Smooth well past a /24.

History

Every saved scan at a glance. Compare any two to see which devices joined, which left, and exactly what changed on the rest.

Focused on the ports that matter on a LAN

NetViz performs bounded TCP-connect checks against a constrained, LAN-oriented default port set — enough to identify what a device is, without behaving like an aggressive scanner.

SSH HTTP / HTTPS SMB RDP VNC Printer (631 / 9100) RTSP MQTT Plex Alt web / admin

Not Nmap. Not RMM. Just visibility.

  • Not an Nmap wrapper — a native Go scan engine
  • No raw packet or SYN scanning
  • No vulnerability scanning
  • No credential handling, remote shell, or remote execution

From one desktop to a small fleet

The same scan engine ships three ways: the desktop app, an always-on probe you drop at a site, and a self-hosted server that turns probe pushes into a live web dashboard.

Always-on probe

netviz-probe installs as a Windows service, systemd unit, or launchd job, scans on an interval, and pushes device inventory with heartbeats — to AnchorDesk or your own NetViz server, same wire contract.

Provision from the GUI

The desktop app's Probe page installs, configures, and manages the service — URL, key, CIDR, interval — through a shared config file the running service re-reads on every cycle.

Self-hosted server

One Docker container stores every push in SQLite and serves a live dashboard: the full device list, device details on click, and the same 3D network map as the desktop app — in light or dark, on a laptop or a phone. Try it with /?demo.

Sign in with your IdP

Optional OIDC SSO (Entra ID, Google, Keycloak, Authentik) puts the web UI behind your identity provider. Probes authenticate with keys; ingest is deny-by-default until one is configured.

docker run -p 8080:8080 -e NETVIZ_INGEST_KEY=your-key \
  -v netviz-data:/data ghcr.io/spillers-technology/netviz

netviz-probe -url http://server:8080 -key your-key -cidr 192.168.1.0/24

Prefer the command line?

Every release bundles netviz-cli, which shares the same scan engine and local history store as the desktop app — scan, save, list, and diff runs as JSON. Pipe it, script it, cron it.

netviz-cli scan -cidr 192.168.1.0/24
netviz-cli scan -cidr 192.168.1.0/24 -save
netviz-cli history
netviz-cli diff

Event-first architecture

One rule: ScanEngine → EventBus → Consumers. The scanner core has no dependency on the UI, server, or storage — every view, export, and history record consumes the same typed event stream.

ScanEngine EventBus Desktop UI CLI JSON SQLite history Monitor mode netviz-probe netviz-server + web map

Free and open source, the boring-honest way

MIT licensed, written in Go with a Wails desktop shell. The history store uses a pure-Go SQLite driver, so there's no CGO anywhere in the build. Read the code, file an issue, or send a PR — the whole scanner fits in your head.

NetViz mascot artwork: a penguin at a desk with the NetViz scan-map-monitor workflow

Roadmap

  1. v0.0.1Desktop scanner with table, graph, hierarchy, monitor mode, exports, history, and CLI parity.
  2. v0.1.0netviz-probe headless scanner with AnchorDesk device push, heartbeats, and native service management.
  3. v0.2.0Desktop probe management GUI, release updater, and a colorblind-validated visual pass.
  4. v0.3.0Self-hosted server: probe ingest, Docker image on GHCR, and the interactive web network map.
  5. v0.4.0IEEE OUI vendor database, per-device history, in-place updates, emoji device icons.
  6. v0.9.xOIDC SSO for the server, the stability freeze, fully self-contained updates, and desktop UX fixes.
  7. v1.0.0 — nowSigned Windows builds on the frozen v0.9 feature set. macOS archives and notarization are deferred.