I.
● SHIPPING
FREE · iPHONE · iPAD
Kestrel Lite
Field triage and learning with the first 50,000 packets of a capture. Dashboard, packets, flows, hosts, DNS, streams, timeline, and audit logging are included.
0x01 · Kestrel Security Stack
2 shipping
1 in development
Packet capture analysis for iPhone and iPad.
Native tools for opening and analyzing PCAP and PCAPNG captures away from a workstation. Lite and Sight ship today. Pro is in development. Analysis is processed on-device. No Tracivex account, no cloud-analysis service, no analytics, and no third-party runtime dependencies.
On-device
No accounts
No telemetry
Native Swift
────── KESTREL ──────
0x10 · ANALYSIS
A mobile network-analysis workspace.
Kestrel turns pre-captured network traffic into packets, conversations, hosts, DNS activity, TCP streams, timelines, and reports without sending the capture to a Tracivex service.
01 / 10
Swipe or use the arrows · Click an image to enlarge
INPUTPCAP · PCAPNG
PACKETSFiltering · protocol detail
NETWORKFlows · hosts · DNS
STREAMSTCP reconstruction in standard mode
CONTEXTTimeline · bookmarks · reports
PROCESSINGLocal to the device
See capabilities and limits
────── SHIPPING NOW ──────
0x20 · AVAILABLE
Lead with what ships.
Lite and Sight are the current App Store products. They share the shipping Kestrel analysis core; Sight removes Lite’s packet cap and adds the professional workflow features.
II.
● SHIPPING
PROFESSIONAL · iPHONE · iPAD
Kestrel Sight
Removes the Lite packet cap and adds analyst bookmarks, raw payload text search, enhanced IPv6 display, and refined PDF reporting.
Current Lite/Sight large-capture behavior and hashing limitations are documented on the Kestrel and support pages rather than hidden behind a generic “unlimited” claim.
────── IN DEVELOPMENT ──────
0x30 · BUILDING
Next in the stack.
Development work is shown separately from shipping software so the roadmap never reads like a release lineup.
III.
Kestrel Pro
Advanced detection, sensitive-data scanning, file carving, and tamper-evident session reporting. The development branch also carries newer core revisions for flow identity, reconstruction, link-layer handling, and evidence processing.
────── OPERATING FACTS ──────
0x40 · EVIDENCE
Claims with boundaries.
The privacy position is expressed as observable application behavior, not as a list of abstract values.
ANALYSISProcessed on-deviceCapture analysis does not use a Tracivex cloud service.
ACCOUNTNone requiredApp Store purchasing is handled by Apple, not a Tracivex identity system.
TELEMETRYNone addedNo Tracivex analytics or crash-reporting service in the Kestrel app.
RUNTIMEApple frameworksNo third-party runtime dependency found in the reviewed Kestrel source.
NETWORKNo application endpointsKestrel analysis code does not initiate connections to a Tracivex service.
EXPORTUser-directedFiles, reports, AirDrop, and Share Sheet transfers occur only when you choose them.
────── CURRENT STATUS ──────
0x50 · AUG 2026
Shipping software first. Roadmap second.
Site status for August 2026. Dates stay visible so “shipping” and “building” do not become timeless labels.
MAKER
Tracivex is an independent software company focused on native Apple-platform security tools. Support emails are answered by the person writing the software.