NetSecWall shows which program on your PC is talking to which address, flags the ones that look wrong, and lets you block them — for an hour, or for good.
Free for 7 days with everything unlocked. No card and no account. Windows 10 and 11, 64-bit.
New app wants to connect
pdf-converter-setup.exe
C:\Users\you\Downloads\pdf-converter-setup.exe
Not signed by a publisher. Reaching 203.0.113.74 on port 8443, an address on a threat list. It is held until you answer.
A recreation of the prompt in the app. Answer it.
Every program with a connection open, by name — with the address on the other end, the country it is in, who owns it, and how much is going each way.
In every plan.
Block a program, an address, a country or a whole category of sites. A program NetSecWall has never seen can be held at the door until you answer.
In Family and Pro.
Addresses are checked against known-bad lists. Behaviour is checked against what attacks look like, and each finding is filed under the technique it matches, so you can look it up.
Threat lists, served from our own servers on every plan: FireHOL Level 1, abuse.ch Feodo C2, Emerging Threats, Spamhaus DROP, blocklist.de, Tor exit nodes.
In Plus, Family and Pro.
| What it notices | Technique |
|---|---|
| Traffic to the same place on a steady timer | T1071Application Layer Protocol |
| A program loading a DLL it should not | T1574.002DLL Side-Loading |
| A system-sounding name in the wrong folder | T1036.005Match Legitimate Name or Location |
| Lookups of machine-generated domain names | T1568.002Domain Generation Algorithms |
| A connection leaving through a Tor exit | T1090.003Multi-hop Proxy |
| A document opening a command shell | T1059Command and Scripting Interpreter |
| An unusual burst of data leaving the PC | T1041Exfiltration Over C2 Channel |
Block adult content and other categories, switch the internet off at bedtime, and cap the hours per day. A password stands between the settings and whoever would rather they were different.
In Family and Pro.
NetSecWall reads your traffic so that nobody else has to. The record stays in a database on your PC. What the app does send is short enough to list in full.
Blocklists and GeoIP tables are downloaded to the PC and matched there, so nothing about a connection is sent anywhere to be looked up. You can export or erase what we hold from Help ▸ Privacy & telemetry in the app. The privacy policy has the detail.
Every install starts with a 7-day trial — every feature unlocked, no card, no sign-up. There's no free tier after that. Choose the tier that matches what you want NetSecWall to do; plans are billed monthly.
Prices are per device. Cancel any time. The trial can't be reset by reinstalling.
Secure checkout · your card details never touch our servers. Orders are handled by our reseller Polar Software, Inc., the Merchant of Record. Available methods vary by country.
For teams Beta
The NetSecWall Management Server enrolls every PC, deploys policy and pushes updates from inside your network. Nothing about your fleet reaches us.
See NetSecWall EnterpriseFrom $299 a year for 25 seats. It is in beta, and set up with our sales team rather than self-service.
The same idea, on the device you actually carry: see what your apps talk to, and cut off the ad and tracking networks behind them. Free, no account — and nothing about it reports back to us.
Android 7.0 or newer · No root needed. No account, no sign-up.
Every install unlocks everything for 7 days — no card, no sign-up, nothing to activate. The trial is tied to the device, so reinstalling won't restart it. When it runs out, there is no free tier to fall back on: pick a plan (from $5/mo), then sign in to the app or paste your key into it. Whatever NetSecWall has already recorded stays on your PC either way.
Either. Every plan has a monthly and a yearly price, and paying yearly costs 10 months instead of 12. You can cancel at any time, and there is a 14-day money-back guarantee if you change your mind.
From our own servers, on every plan. We collect the public threat and content lists, remove duplicates and dead entries, and serve one clean copy of each, so your PC makes a single download from us instead of visiting a dozen list hosts. The GeoIP tables behind the country flags arrive the same way. Everything is matched on your PC: no address you visit is sent anywhere to be checked.
It shouldn't. NetSecWall watches quietly in the background instead of sitting in the middle of your traffic, so monitoring stays light. Blocking does work only when you block something.
Yes. Windows requires elevation both to see per-process network activity and to change firewall rules, so NetSecWall asks for it when it starts. The trial needs no account; you only sign in once you have bought a plan.
No. If another manager (Windows Firewall Control, GlassWire, a third-party suite) already owns the Windows Firewall, switch NetSecWall to Companion mode. It keeps monitoring and can still block on its own, without touching the other tool's rules.
Not your traffic: that record stays in a database on your PC. The app does check its license with our server, which involves a one-way hash of the device, the app and Windows versions, the PC name and its country, and it downloads blocklists from us. Usage analytics are opt-in and off until you say yes. The full list is in the section above and in the privacy policy.
Yes. Closing the window minimizes to the tray and keeps monitoring. For always-on coverage, even before anyone logs in to Windows, the installer sets up a background service; you can also add or remove it from the setup wizard.
Windows 10 and 11, 64-bit. NetSecWall is built specifically for Windows, so it's Windows-only by design.
Open Help ▸ Privacy & telemetry and choose erase — the app sends an immediate deletion request and everything tied to your anonymous ID is removed. You can also opt out of analytics entirely with one switch.
You will see programs you did not know were talking.
Run the installer and you are done. The 7-day trial starts itself; no key and no account.
sha256: 18e3ec6820e251fbba37cf946d85e32c1b4e986e005c0f718ee9e728b35ba946
Windows asks for administrator rights when NetSecWall starts: it needs them to see per-program traffic and to manage the firewall.
Deploying across a fleet? The installer supports unattended installation — see silent install and exit codes.
We use Microsoft Clarity to see how this site is used — which pages confuse people, and where something is broken. Allowing cookies lets it recognise you between pages of the same visit. Decline and it stays on, but anonymously and without cookies. Typing is masked either way, and none of it touches the NetSecWall app on your PC.What we collect