NETCAP Pro
NETCAP Pro
Cross-platform desktop application for advanced network analysis. Available from Amsterdam Technologies.
The Full Netcap Engine,
On Your Desktop
A desktop application built on the Netcap Core engine for relationship reconstruction, timeline investigation, and focused Wireshark handoff.
Cross-Platform App
Native desktop application for macOS, Windows, and Linux. Same features on every platform.
Relationship Reconstruction
Reconstruct relationships between hosts, services, and captured activity in an interactive workspace.
Timeline Workspace
Reconstruct captured activity over time and move between events and related network entities.
Focused Wireshark Handoff
Open direct-download captures from relationship graph entities in Wireshark with generated traffic filters.
35+ Analysis Modules
Use Cases for NETCAP Pro
Packet Investigation
Open a direct-download capture from a selected relationship graph entity in Wireshark with a generated traffic filter.
Threat Hunting
Reconstruct relationships between hosts, services, and captured activity in an interactive graph workspace.
Incident Response
Reconstruct network activity over time, then follow related entities in the relationship workspace.
Security Operations
The same app on macOS, Windows, and Linux, so an analyst can move between a SOC workstation and a laptop without relearning anything.
Follow the connection. Inspect the evidence.
Audit records → connection filter → HTTP fields. A browser-local reconstruction of the Pro interface using three fictional connections, not a running packet decoder.
Protocol records grouped by encapsulation layer
Ethernet.ncap.gz52 recordsIPv4.ncap.gz52 recordsTCP.ncap.gz50 recordsUDP.ncap.gz2 recordsDNS.ncap.gz2 recordsHTTP.ncap.gz1 recordsAudit records · Step 1/6
Live Demo
Try NETCAP Pro in your browser against pre-loaded example captures. No installation required.
What NETCAP Costs
The open-source CLI is free forever. Pro adds the desktop application; Enterprise adds seats, SLAs and custom work.
Core
Open source CLI tool for developers and researchers
- 66+ audit record types
- Protocol Buffers & CSV export
- Live capture & PCAP analysis
- Prometheus metrics export
- Maltego integration
- Distributed collection
- Built-in host graphs & 3D views
- Magika AI file classification
- Desktop investigation workspace
Pro
or €48/year
Full-featured desktop app for security professionals
- Everything in Core
- Cross-platform desktop app
- Interactive relationship graph
- Timeline investigation workspace
- Direct-download Wireshark opening with generated traffic filters
- Session export & loading
- Email support
Enterprise
For teams and organizations with advanced needs
- Everything in Pro
- Unlimited team seats
- Priority support (SLA)
- Custom integrations
- On-site training
- Dedicated account manager
- Custom feature development
- Security audit assistance
- Volume licensing
Offline analysis, one payment
The Mac App Store edition analyzes capture files you select. It performs no live capture, packet injection, active probing, external tool execution, or cloud upload.
NETCAP Pro for Mac
Paid up front, with no subscription or external licence key
- Offline PCAP, PCAPNG and CAP analysis
- Records, hosts, connections and protocol metadata
- Graph and timeline exploration
- Passive findings and local export
- Capture contents remain on your Mac
- No live capture or packet injection
- No Wireshark, shell or external helper execution
Feature Comparison
| Feature | Core | Pro | Enterprise |
|---|---|---|---|
| Audit Record Types | 66+ | 66+ | 66+ |
| Live Capture | |||
| PCAP Analysis | |||
| Desktop Application | |||
| Built-in Host Graphs & 3D Views | |||
| Magika File Classification | Via external CLI (direct edition) | Via external CLI (direct edition) | |
| Relationship Graph Workspace | |||
| Timeline Workspace | |||
| Wireshark Handoff | Manual | Generated filters | Generated filters |
| Support | Community | Priority SLA | |
| Team Seats | N/A | 1 | Unlimited |
Frequently Asked Questions
Can I try before I buy?
Yes! NETCAP Pro includes a 14-day free trial with full access to all features. No credit card required.
What payment methods do you accept?
We accept all major credit cards, PayPal, and wire transfer for enterprise customers.
Can I cancel anytime?
Yes, you can cancel your subscription at any time. You'll continue to have access until the end of your billing period.
Do you offer educational discounts?
Yes! We offer 50% off for students and educators. Contact us with your .edu email for verification.
Download the Netcap Whitepaper
Netcap is a deep network packet inspection platform and intrusion detection system that decodes traffic into structured, type-safe audit records for analysis and threat detection.
Get in Touch
Questions about Netcap Core, Pro, or Enterprise? We'd love to hear from you.