ZeroTrace AirLeak
Features Overview
Everything AirLeak can do, organized by what you're trying to learn
AirLeak is a single hardware unit, but it's actually a whole stack of capabilities. This section walks through every feature with tutorial-style explanations — what it does, when to use it, and how to get value from it.
Live observation
Tools for understanding what's happening right now.
- Live Monitoring — Reading the live event stream and the heartbeat status bar
- Device List — Using the Devices page: BLE / WiFi tabs, search, filters, sorting, density
- Single Device View — Deep-diving into one device: signal history, action timeline, identifiers, why it was classified that way
Privacy and tracking
Tools for catching the kinds of things AirLeak was built to find.
- Tracker Detection — Finding AirTags, Tile, SmartTag, and other unwanted trackers
- Privacy Audit — Auditing what your own devices are leaking
- Probe Analysis — Reading the network history a phone reveals through probe-requests
Network analysis
Tools for understanding the WiFi environment around you.
- Network Survey — Surveying nearby WiFi networks for security posture, hidden SSIDs, WPS, MFP, country, BSS load
Live device intelligence
Tools that show you what's actually happening on people's devices in real time.
- Apple Continuity Decoding — Reading Apple device state in real time (screen on/off, in call, watch unlocked, AirPods battery, OS version)
Memory and recall
Tools that turn one-off captures into an organized history.
- Sessions — Recording, exporting, and replaying captures
- Library — Cross-session device memory: who's been near you before
- Alerts — Using the privacy-alert engine effectively
- Insights — The dashboards that summarize a capture
Recipes
- Common Workflows — Step-by-step recipes for the things people commonly want to do
Start with Your First Capture for the 5-minute walkthrough. Come back here once you've done a capture and want to know what every part of the app does.