SYSLOGWATCH — FOR SMALL IT TEAMS

Every log from your network, in one window on your own machine.

Point any device that speaks syslog at your computer and its messages appear here as they arrive — filtered, searchable, and saved to your own disk. SyslogWatch also learns what a normal day looks like on your network and says so when something departs from it. Nothing is uploaded: no cloud account, no API key, no log data leaving the machine. It works on a network with no internet at all.

30 days with every feature on, including the AI detection — no card, no account. After that it drops to the free tier and keeps running. macOS, Windows and Linux. Six more tools →

The SyslogWatch window: a filterable table of syslog messages from a firewall, core switch, router and NAS, colour-coded by severity.
The actual window, with sample messages from a small office network.

Your data stays on your machines

Desktop apps for macOS, Windows and Linux that respect your data and stay out of your way — no ads, no analytics, no cloud accounts unless you ask for them. That rule now covers the machine learning too: it runs inside the app and calls nothing.

APPS

What we build

SyslogWatch, DeviceWatch, TrafficWatch, CertWatch, ConfigWatch, TrapWatch and MeshServerWatch each watch their own thing well, and each stands on its own. Connect any of them to MeshWatch Central and a config change, a certificate expiring, and the log burst it caused stop looking like three unrelated alerts — and start looking like the one incident they actually are.

The six network products and Central each have a click-through demo loaded with a sample network — the real screens, no sign-up, nothing to install.

SyslogWatch

NEW · AI

Network syslog server for your desktop.

Point any router, NAS, firewall, or Linux box on your network at your computer and see events in real time. RFC 3164 + RFC 5424, filter as you type, local archive, no cloud account. On-device anomaly detection learns your baseline and flags what breaks it. macOS, Windows and Linux.

See details →

DeviceWatch

NEW · AI

SNMP monitoring that learns your network.

Polls switches, routers, firewalls and servers over plain SNMP — no agents, no collector, no cloud. Interfaces, traffic, errors, CPU, memory, temperature, fans and power. On-device AI learns each interface’s baseline per hour and per weekday, and learns which alarms you keep dismissing so it stops emailing them. Up to 250 devices. The map also shows the neighbours your switches know about but you have not added yet, with their IP address. 30-day trial, then a licence — no free tier. macOS, Windows and Linux.

See details →

TrafficWatch

NEW · AI

See which sites every device on your network visits.

Your computer becomes the DNS server for the network you own, and every lookup shows up by device — the TV phoning an ad exchange, the gadget talking to a server you have never heard of. On-device AI scores every domain locally and flags malware-style random ones as they happen, no cloud lookup. Domain-level only, alert rules with email, local storage, no cloud account. Free for 3 devices. macOS, Windows and Linux.

See details →

CertWatch

Nobody notices a certificate until it expires on a Sunday.

Connects to the hosts you name, reads the TLS certificate each one actually serves, and reports what expires when, what is no longer trusted, and what is quietly serving the wrong name. Pro rechecks on a schedule, scans whole subnets by CIDR, watches the DNS behind each host, and sends webhook alerts to Slack or Teams. Runs from your own computer, so it reaches internal hosts a hosted checker never could. Free for 3 hosts. macOS, Windows and Linux.

See details →

ConfigWatch

Know what changed on the switch, and how to put it back.

Logs into your switches and routers over SSH with a read-only account, keeps every version of their running configuration on your own computer, and shows the exact lines that changed between any two of them — with the commands that would restore the earlier one. Secrets are masked before anything is written, and a configuration that cannot be fully masked is refused rather than stored. It generates rollback commands; it never runs them. Cisco IOS, MikroTik RouterOS and Ubiquiti EdgeOS. Free for 3 devices. macOS, Windows and Linux.

See details →

TrapWatch

Your switches are already telling you when something breaks.

Receives SNMP traps from anything on your network — no device list to maintain first — and decodes what they mean: which link went down, on which interface, and how badly it matters. Vendor traps are shown by OID rather than given an invented description. On-device anomaly detection learns each device’s normal pattern and reports flapping links, trap storms and first sightings; it stays quiet until it has a baseline. Listens on port 1162 so it does not need root. SNMP v1 and v2c. 30-day trial, then US$228/year. Windows, Linux and macOS.

See details →

MeshServerWatch

NEW · SERVERS

A disk that fills up on Friday night should be an email on Friday night.

A small agent on each Windows or Linux server reports CPU, memory, every disk and error-level event log or journald lines to a Manager you run yourself. The Manager keeps 30 days of charts per server, raises one alert when a threshold is crossed and one when it clears, notices a server that has gone silent, and emails you. HTTPS by default, with the certificate pinned by fingerprint. Only numbers and one-line summaries leave each server. 30-day trial with unlimited servers, then US$5 per server per month, or US$48 per server per year (minimum 3 servers), Manager included. Windows Server and Linux.

See details →

MeshWatch Central

NEW · HUB

A config change, a link down, and a log spike on the same switch — one incident, not three alerts.

Connects to ConfigWatch, CertWatch, DeviceWatch, TrafficWatch, SyslogWatch and TrapWatch, and correlates what they each report into a single incident when they're about the same device. One alert inbox, one device list, role-based accounts for a team. Self-hosted on your own server — Central never sees more than a one-line summary from any product. Works with however many you connect; you don't need all six. 30-day free trial, and an interactive demo you can click through without installing anything.

See details →

Not network monitoring

Different problems, same rules — your data stays yours, and nothing phones home.

SecureServe

macOS · Linux

Secure network file transfer server you actually own.

Notarised macOS PKG and Linux binaries. Admin dashboard, per-user portal, backup and recovery, local-first. Self-hosted on your own network — an alternative to hosted file-sharing services.

See details →

SubWatch

Web · free

See what your subscriptions really cost.

Add everything that renews automatically and get the monthly total, the yearly damage, and the exact days money leaves. Four currencies, four languages, works offline, installs to your home screen. No account — nothing you type leaves your browser.

See details →

HOW WE BUILD

Principles

Local-first

Your data stays on your device unless you explicitly export it. No developer telemetry, no advertising SDKs. The AI follows the same rule: it runs inside the app, on your own logs, and calls nothing.

Small & focused

Each app does one thing carefully. No feature bloat, no pivot toward whatever is trending this quarter. We added machine learning to SyslogWatch because reading a firewall log by eye does not scale — not because of the word.

Honest pricing

Free tier when it makes sense. Subscription only when there is ongoing cost to justify. No dark patterns.