ZeroTrace Echo
What It Does
A plain-language tour of the ZeroTrace Echo, from capture and decode to counter-surveillance.
What It Does
Echo turns the sub-GHz radio band into something you can read on your phone. It works in three broad modes, all driven from the mobile app over Bluetooth LE.
Capture and decode
Echo listens for the short bursts that remotes and sensors transmit, then works out what they are. It recognises:
- 16 fixed-code remote protocols, from EV1527 and PT2262 through Hörmann, Clemsa, Nexa, Dooya, Magellan and more, plus a general decoder for cheap unnamed remotes. See Fixed-code decoders.
- Rolling-code remotes (KeeLoq, Somfy RTS, Security+, and an identification list) captured and classified, never decrypted. See Rolling-code.
- Sensor traffic, the tyre-pressure, weather and alarm sensors Echo supports. See Sensor decoders.
Analyse
A frequency hunter scans a range and points you at the strongest channel, and an autotune feature locks onto remotes whose frequency has drifted with age. See Sub-GHz capture.
Defend
Four listen-only detectors watch for jamming, duplicate remotes ("your fob was captured"), a silenced sensor, and the tell-tale RollJam pattern, and push an alert to your phone. See RF counter-surveillance.
Work standalone and together
A single programmable button lets Echo arm a capture or send a saved signal with no phone in reach (Standalone button). Phone-GPS wardriving, an experimental Echo-to-Echo link and a shared signal library round out the connected layer.
Echo only ever transmits fixed-code signals, replaying a saved signal, brute-forcing a short keyspace, or fuzzing. All of these refuse rolling-code remotes. There is no offensive jammer: the jamming feature only detects jamming, it does not produce it. Transmit only against equipment you own or are authorized to test.