Map the invisible.
Real-time network traffic visualizer for Windows. See every connection your computer makes - who it talks to, where they are, and which app is responsible.
Website - Download - Report a bug
| Feature | Description |
|---|---|
| Force Graph | Live node graph - your machine at the center, every connection as a node |
| World Map | Geolocated IPs with animated arcs on an interactive globe |
| 60-min Timeline | Sliding history stored locally in SQLite |
| Anomaly Detection | Flags port scans, beaconing, potential exfiltration |
| Process Attribution | Know which app generates which traffic (top 5 per connection) |
| LAN Scanner | ARP discovery of all devices on your local network |
| Privacy Score | Real-time score of your outgoing traffic exposure |
| Bandwidth Monitor | Live MB/s sparkline |
PCYBOX Orbis Setup 1.0.0.exe - Windows 10/11 64-bit - ~101 MB
Requires administrator rights for network capture. Npcap is installed automatically on first launch.
Windows SmartScreen warning? Click "More info" → "Run anyway". The app is not yet code-signed this is expected for an indie release.
| Layer | Technology |
|---|---|
| Packet capture | Python - Scapy - Npcap 1.79 |
| Backend API | FastAPI - WebSockets - SQLite |
| Frontend | React 18 - Vite - D3.js v7 - TopoJSON |
| Desktop wrapper | Electron 28 |
| Geolocation | MaxMind GeoLite2 |
The Docker deployment is for Linux users who want to run Orbis without installing anything beyond Docker.
Packet capture works via network_mode: host the container sees real host traffic.
Note: Docker Desktop on Mac/Windows runs inside a VM and cannot capture traffic from the Windows/macOS host. Use the Electron installer on those platforms.
# Clone and enter the repo
git clone https://github.com/Mister-iks/pcybox-orbis
cd pcybox-orbis
# Optional: place your MaxMind GeoLite2-City.mmdb in data/ for offline geolocation
# Without it, the app falls back to ip-api.com (45 req/min, no key needed)
mkdir -p data
# Build and run (requires Docker + root/sudo for raw socket capture)
sudo docker compose up --buildOpen http://localhost:8000 in your browser.
To run in the background: sudo docker compose up -d --build
Limitations compared to the Electron app:
- Process attribution is limited to container processes (host PIDs not shared by default)
- No LAN scanner on some network configurations
- Python 3.11+
- Node.js 18+
- Npcap installed
- Administrator terminal for backend (packet capture)
# Backend (admin terminal)
cd backend
pip install -r requirements.txt
python run_backend.py
# API available at http://127.0.0.1:8000
# Frontend (separate terminal)
cd frontend
npm install
npm run dev
# UI at http://localhost:5173
# Electron (optional, admin terminal)
cd electron
npm install
set VITE_DEV=1
npx electron .# 1 - Compile backend (PyInstaller)
cd backend
pip install pyinstaller
pyinstaller backend.spec --distpath ../dist/backend
# 2 - Build frontend
cd frontend
npm run build
# 3 - Build Electron installer
cd electron
npm run build:dir
# Then repack app.asar and run:
# npx electron-builder --win nsis --prepackaged ../dist/installer/win-unpackedpcybox-orbis/
- backend/ Python FastAPI + Scapy capture engine
- frontend/ React + D3.js UI
- electron/ Electron wrapper (main.js, splash, preload)
- website/ Official landing page (orbis.pcybox.com)
- docs/ SVG logo variants
- resources/ Npcap installer bundle
- dist/ Compiled output (backend exe, installer)
AGPL v3 - see LICENSE
Free to use, study, and modify. Any derivative work must also be open source under AGPL v3. Commercial use requires a separate license - contact ibrahimapro289@gmail.com