PCYBOX product
Orbis
Which application on your machine talks to whom, in real time.
Overview
What Orbis does.
Orbis makes visible what your machine sends over the network. The open source Community edition captures traffic in real time, links each connection to the process that opened it and shows destinations on a map. The Enterprise edition, in preparation, targets a centralized, self-hosted view of the whole fleet.
- Process attribution
- Each connection is linked to the application that opened it.
- Connection graph
- Your machine at the center, every active connection shown in real time.
- Destination map
- Contacted addresses are geolocated and shown on a map.
- Anomaly signals
- Port scans, beaconing, unusual volumes: signals worth investigating.
- Local history
- The last hour of connections kept locally, with no remote service.
- Local network discovery
- Inventory of the devices on the local network.
Orbis is neither an antivirus nor an EDR. Its signals call for investigation and do not prove a compromise.
Fact sheet
- Community
- Open source, AGPL v3 license, Windows application
- Enterprise
- In preparation: centralized, self-hosted fleet view
- Technologies
- Python, Scapy, Npcap, Electron
- Platform
- Windows 10, Windows 11
Who it's for
- IT teams that want to understand their endpoints' traffic
- Developers debugging an application's network calls
- Users who care about what their software sends
Other products
- Ready to deploy
- In production
- R&D
- Open source
A project involving Orbis?
Let's talk about your context and how this product can fit it.