NaruBase™
NaruBase™ Wireless
Zero-Trust wireless security agent — rogue Wi-Fi / BLE detection with offline vendor identification (v1.2)
NaruBase™ Wireless is a Zero-Trust endpoint agent that continuously inventories Wi-Fi networks and Bluetooth devices around each machine. Every BLE device is labeled offline with its vendor and service type using the bundled Bluetooth SIG registries (4,016 vendors + 125 services). Behavioral baselines flag unusual-hour presence, RSSI outliers, and payload changes. Single signed binary — no cloud, no accounts, no telemetry.
Download the latest build from GitHub Releases. Install, try it free for 7 days, then enter your license to keep using it.
1. Visibility your SIEM and MDM don't give you
Modern endpoints sit in Wi-Fi and Bluetooth soup that nobody monitors — rogue APs, stale employee devices, random IoT from neighboring tenants, deauth-capable tools in a backpack. Traditional SIEMs see network traffic and MDMs see enrolled devices; neither sees the access point in the conference room next door or the unknown Bluetooth device that shows up every afternoon near a developer's laptop. NaruBase™ Wireless runs on the endpoint itself and turns that invisible layer into a monitored one.
2. Watch mode, real-time alerts, and behavioral anomaly detection
Watch mode auto-starts on launch — install, open, walk away. Scans run on a configurable interval (default 60 s) with a graceful Start / Stop toggle. Every new Wi-Fi network and every advertising BLE device becomes a Windows native toast and an in-app slide-in toast. After 50 observations per device, a behavioral baseline kicks in and flags three kinds of anomaly: unusual-hour presence, RSSI deviations beyond 2.5σ from the rolling baseline, and BLE manufacturer payload hash changes (a signal of firmware change or tooling swap). Each anomaly kind has a 1-hour per-device cooldown so alerts stay signal, not noise.
3. Offline BLE vendor and service identification (v1.2)
Every scan cycle now tells you which vendor each BLE device belongs to and what kind of device it is — fully offline. The installer bundles the full Bluetooth SIG Company Identifiers registry (4,016 vendors — Apple, Samsung, Bose, Roborock, iRobot, Chamberlain, Orbit/Bhyve, and more) plus the Service UUID registry (125 categories including Battery, HID, Heart Rate, Environmental Sensing). A raw MAC becomes "Apple, Inc. · Battery · HID". Zero external API calls, zero lookup leaves your machine — the registries live in-memory after compile-time embedding.
4. Zero-Trust licensing and pricing
The only outbound request the app ever makes is an optional GET for a version manifest on the public marketing repo, and it can be disabled. License keys are offline-verified — a signed Ed25519 blob checked against an embedded public key, no license server. $99 one-time per user on any machine you own, with a 7-day free trial. After the trial, Scan Once stays free forever; Watch mode (continuous background scanning) requires a license. Ships today for Windows 10/11 (x64); macOS BLE ready with Wi-Fi in progress; Linux community support. Enterprise fleet licensing on request.
7-day free trial. Scan Once stays free after the trial; Watch mode requires a license.