DeviceShelf overview

DeviceShelf maps your local network and keeps the map on your own machine. One scan lists every device that answers, with vendor, hostname, operating system and device type, then shows which ports are open and what that means for your security.

It sweeps every adapter at once, including the VPN and Docker bridges most scanners hide. Devices are identified from MAC OUI, DNS, mDNS/Bonjour, NetBIOS, TTL and DHCP fingerprints, so a router, NAS, printer, camera, phone or IoT gadget is named rather than listed as a bare address.

Open TCP and UDP ports are enumerated with service detection, and from that DeviceShelf writes a prioritised security report: exposed Telnet, RDP, ADB, Docker API or Redis, default credentials, weak TLS and known-CVE hints, each with a fix and a risk score.

In the background it watches who joins and leaves and tells you when an unknown device appears, with uptime, latency and live bandwidth per device.

No account, no telemetry, no cloud sync. Scan results stay on the computer that produced them, and the optional AI assistant runs on your own API key or a local model such as Ollama. One licence also covers the Windows, Linux, iOS and Android builds and the round-the-clock server edition.

What's new in version 1.9.40

A failed router connection now says what went wrong instead of always blaming the password: unreachable, no endpoint, refused, no data, or no matching brand. The brand picker names what has to be enabled first for OpenWrt, UniFi, FRITZ!Box and MikroTik.
All seventeen router brands were re-checked against recorded answers, which fixed three defects: a disconnected Peplink client counted as present, a Netgear device with an unreadable MAC vanished from the list, and UniFi Network 9.x switch ports were read from the wrong field.
Threshold checks no longer skip the first tick after a restart, save as you edit instead of behind a Save button, and record what they measured. In the monitoring list a check is no longer shown as if it were a device.