Trakorn How it works trakorn.com ↗

From install to live map

How Trakorn works, end to end.

Trakorn runs on your own kit, only ever looks at networks you own or are cleared to test, and keeps one always-current picture of what's really there. Here's how you install it, set it up, use it day to day, and how it keeps watching — plus how the suite tools fit together.

Runs on your kit Safe mode by default Only your networks One live map

The process

Five steps to a live network map

Nothing scans until you've named the networks you're allowed to look at. That scope check is enforced everywhere.

1

Install

Deploy the Trakorn collector and twin store on a machine you control — a laptop, a server, or a box on the segment you want to watch. It's self-hosted; no agent on every device, and nothing leaves your network unless you choose a hosted plan.

pip install → uvicorn trakorn.api:app → open the console
2

Set your scope

Tell Trakorn which address ranges you own or are cleared to test. This is the guardrail: with no scope set, Trakorn refuses to scan. Everything you run afterward is checked against it.

3

Discover & survey

Run a discovery sweep to find what's on the network, then a survey to see which ports are open and a quick identify pass to tag each device's role and best-guess system. It starts in a safe simulated mode so you can see exactly what it would do before anything touches the wire.

4

Watch the living twin

Every run writes into one continuously-updated model — the "living twin" — instead of leaving you a pile of separate scan files. The console draws it as a live map, and flags what's new, what changed and what went quiet since last time.

5

Ask & report

Ask the network in plain words, export a clean CSV or HTML report, and let the insight panel point out what deserves attention — exposed services, rogue or unidentified devices, risky openings.

The suite

How the tools work together

Seven jobs you'd normally juggle across separate tools, all writing into the same living twin.

Discover

Finds what's on the network — a ping / ARP sweep that lists every device that answers.

Survey

Checks which common ports are open on each device, so you can see what's actually exposed.

Identify

Tags each device's role and best-guess operating system from its ports and fingerprint — without ever overwriting facts you've set yourself.

Resolve

Looks up names and DNS for the addresses, so the map reads in plain language instead of bare IPs.

Reports

One click to a clean CSV or HTML snapshot you can hand to a colleague, an auditor or a client.

Insight (preview)

Reads the twin and surfaces what matters — exposed databases, rogue devices, risky services. Today it's a rules engine; a deeper model is on the way.

Read · on the bench

Live traffic capture — listening to real conversations on the wire. Designed, not shipped yet.

Watch · held back

Active inspection. Deliberately held for export-control and consent review before it ever ships.

Monitoring

How it keeps watching

Living map

Redraws every scan — devices grouped by segment, with plain-English labels and glowing links.

Health gauge

A single barometer-style reading of overall network "pressure", from fair to stormy, so you know at a glance.

Segment board

A signal-tower per segment — clear, caution or alert — from the worst thing found on it.

Alerts

A beacon strip lights up on high-severity findings, with a plain severity tag, and stays quiet otherwise.

Trust badges

Each device carries a wax-seal mark: known and trusted, unidentified, or rogue.

Time travel

Rewind to any earlier snapshot and see exactly what changed, when.

Scope-first, always. Trakorn only ever looks at the ranges you've declared you own or are cleared to test, and it defaults to a safe simulated mode so you can preview any action before it runs for real.

FAQ

Questions people ask

Do I have to install anything on every device?

No. You install one Trakorn collector on a machine you control, on the segment you want to watch. There's no agent to push onto every laptop or server.

Where does it run, and where does my data go?

It's self-hosted — it runs on your own kit and your network data stays with you. Nothing is sent out unless you deliberately choose a hosted or regional plan.

Will it touch networks I don't own?

No. You set an explicit scope of the ranges you own or are cleared to test, and Trakorn refuses to scan anything outside it. With no scope set, it won't scan at all.

Is it safe to run on a live network?

It starts in a safe simulated mode so you can see precisely what it would do before anything touches the wire, and the scanning it does is the conservative, read-only kind. The more active modules are deliberately held back pending compliance review.

What's the difference between the plans?

Core is free and self-hosted for personal and internal use. Team and Pro add more seats, bigger networks, longer history and the insight features. Enterprise / MSSP is for multi-site orgs and providers, priced to your estate. Full detail is on the pricing page.

Can I try it without paying?

Yes — Core is free to self-host. You can run discovery, survey, identify, resolve and reports, and upgrade later from inside the console.

Does it work for customers in the EU / UK?

Yes. Because you self-host, data stays in your region; hosted plans offer regional options so network data stays in-region where that's a requirement.

Do I need to be a security expert to use it?

No. The map and plain-English labels, the "just ask" queries and the insight panel are built so you get a clear answer without stitching together seven separate tools.

Can I buy a plan right now?

Not yet — Trakorn is pre-launch and used internally first. The pricing is set, but online checkout isn't open. Reach out via trakorn.com and we'll let you know when it opens.