How secure is your
home network?
WAnalyzer checks what the internet can see of your connection, how your Wi-Fi is encrypted, how your router is configured and which devices are on your network. You get a graded report with concrete, technical fixes.
External scan
From our server we probe your public IP for open ports, exposed services, UDP reflectors and weak TLS. Runs automatically.
Local check
Paste one line into your terminal. It reads your Wi-Fi, DHCP, DNS, router, UPnP, device hardening and maps your LAN. Nothing is installed.
Report
A score per category with findings ranked by severity, each with the technical detail and CVE or ATT&CK reference behind it.
What gets checked
Internet exposure
Open TCP ports with service and version detection, open DNS resolvers, SSDP and NAT-PMP reflectors, SNMP with default community, deprecated TLS, self-signed or expired certificates, exposed admin panels.
Wi-Fi
WEP / WPA / WPA2 / WPA3, TKIP, transition-mode downgrade, Enterprise, open and WEP neighbours, and saved networks your device auto-joins (evil-twin risk).
Router
Telnet and FTP, plain-HTTP and Basic-auth admin pages, deprecated TLS, UPnP IGD, port forwards created via UPnP, CGNAT and double-NAT detection.
DNS
NXDOMAIN hijacking, DNSSEC validation and DNS rebinding protection.
Local network
Device discovery with vendor identification, risky open ports, IoT and camera isolation, ARP-spoofing signs, IPv6 exposure and MAC leakage.
This device
LLMNR / NBT-NS poisoning, SMBv1, SMB signing, NTLMv1, WPAD, RDP without NLA, firewall and antivirus state.