Skip to content

ZeroTrace AirLeak Pro

Bluetooth Intelligence

The BLE device-identification stack, running alongside Wi-Fi

Alongside Wi-Fi, AirLeak Pro runs the full AirLeak Bluetooth stack. It listens to BLE advertisements and turns them into a live, classified device list, telling you not just that "a Bluetooth device is here" but what it actually is.

Same engine as AirLeak

The Pro's Bluetooth capture is identical to the standard ZeroTrace AirLeak. This page is the short version, the full device-class list and per-device fields live in AirLeak's What AirLeak Sees.


What it identifies

Every BLE device is classified into a specific type with a confidence score:

  • Apple ecosystem, iPhone, iPad, Mac, Apple Watch, AirPods (with battery + lid state), AirTag, HomePod, Apple TV
  • Phones, Samsung, Pixel, other Android
  • PCs & TVs, Windows PCs, smart TVs
  • Wearables, watches and bands
  • Trackers, AirTag / Find My, Tile, Samsung SmartTag, Google Find My Network
  • Audio, headphones, earbuds, speakers
  • Smart home / IoT, sensors, locks, bulbs, Matter devices
  • Other, printers, vehicles, fitness sensors, keyboards/mice, Flipper Zero, Matter devices, beacons

Around 35 classes are recognized in total, and each classification carries a 0–100 confidence score so you can tell a firm identification from an educated guess.


Recognition is driven by the advertising protocol each device speaks. The Pro decodes:

  • Apple Continuity (nearby-info, handoff, AirDrop, AirPods)
  • Apple / Find My and FMDN (Google's Find My Device network)
  • Tile and Samsung SmartTag
  • Microsoft Swift Pair and Google Fast Pair
  • Eddystone beacons
  • Exposure Notification (COVID-era contact-tracing beacons)
  • Ninebot / Segway scooters

Environmental sensor advertisements (temperature, humidity, battery) are decoded too, both from advertisements and, on demand, from a device's GATT services.


Live device state

For supported devices, the Pro decodes real-time state directly from the advertisements:

  • Apple Continuity, screen on/off, in-call, AirPods battery per pod + case, OS hints
  • AirPods, left/right/case battery, charging, lid open/closed
  • Trackers, separated-from-owner state, unwanted-tracking-protection signals
  • Signal, live and smoothed RSSI, plus a distance estimate

Privacy signals

The same leakage detection AirLeak is known for:

  • AirDrop discoverable ("Everyone")
  • Unwanted-tracker flags
  • MAC-randomization type, public, RPA (resolvable), NRPA (non-resolvable), or random-static
  • Combined leakage score (0–100) per device
  • Cross-MAC tracking, follows a device across MAC rotation where its advertisement is fingerprintable
Audit your own devices

Point the Pro at your own phone, laptop and earbuds to see what they broadcast, the same privacy-audit workflow as AirLeak's Privacy Audit.

Command Palette

Search for a command to run...