Lightweight eBPF flow engine for OpenWrt and Linux routers with real-time traffic monitoring and kernel shaping
Automated SSL certificate expiration alerts via email, Telegram, Slack or webhook
Stage
Not given
Not given
Founded
Not given
Not given
Based in
Not given
FR
Pricing model
Freemium
Freemium
Pricing
Free: Community plan with 2,600+ open source rules and core features. Pro Monthly: $3.99/mo with 3,800+ rules and weekly updates. Pro Annual: $29.99/yr with all Pro entitlements. Pro Lifetime: $69.99 one-time with permanent license and 1 year of rule updates.
Free: 0€/month with 3 domains; Pro: 9€/month or 99€/year with 25 domains; Agency: 29€/month or 319€/year with 150 domains. Annual plans offer one month free.
Key features
Real-time eBPF network telemetry with zero-copy line rate processing
Zero-agent device profiling using DHCP fingerprinting and mDNS
Encrypted traffic identification without SSL decryption
Sub-second quality telemetry with TCP/UDP RTT monitoring
Local timeseries storage in SQLite or ClickHouse databases
Per-device bandwidth ceilings and isolation with HTB
Application-aware QoS priority queues with kernel HTB classes
Sub-second policy synchronization with automatic kernel fail-safe rollback
Flow tracing from socket to BGP origin with latency tracking
Privacy-first architecture extracting only metadata, no packet payloads
Daily certificate verification
Email, Telegram, Slack and webhook notifications
Customizable alert timing at 30, 15, 7, 5, 3 or 1 day before expiration
CSV import and export
Multiple recipients with domain-level assignment on Agency plan
Weekly and monthly email reports on paid plans
REST API for domain management on Agency plan
Invalid certificate alerts
What makes it different
Fully self-hosted with zero mandatory cloud sync or telemetry fees
Lightweight eBPF implementation using only 1.2% CPU and 18MB RAM
Open source core engine with optional Pro rules subscription model
99.4% application identification accuracy without decrypting encrypted traffic
Complete privacy by design storing only flow headers and SNI, never payloads
No server installation required, reads certificates like a browser would
Free plan supports up to 3 domains without requiring a credit card
Combines automatic renewal alerts with notifications for failures that don't trigger alerts
Suitable for agencies managing client sites with per-domain recipient control