Your router calls it "Unknown device" at 192.168.1.23; Vedetta calls it the kitchen light and shows its work. Vedetta is a Home Assistant app that scans your local network, identifies what each device actually is, and explains every identification. One scan lists every device it can find with presence and latency history, in tile or list view, light or dark, on a computer or a phone. Behind each name sits the recognition engine: it weighs many weak clues together, counts a repeated fact once, groups devices by family, and shows certainty honestly, keeping anything doubtful in Other rather than inventing a label. Tap the info marker beside a name, brand, or type and a pop-up lists every clue, its weight, and the hypotheses that were rejected. Names or rooms you set by hand are never overwritten by later scans, and sleeping phones are remembered instead of flickering in and out. Choose from three search levels depending on how hard you want it to probe, let the nightly deep search refresh the picture, and use the network doctor to spot duplicate addresses, repeated restarts, devices that drop together, or a slowing gateway. It can also publish what you choose to Home Assistant and MQTT, display devices from other networks your Home Assistant already sees, and mask exports before they leave the machine. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Self-hosted and account-free, LAN Sheriff watches where your devices send their traffic, plots each destination on a live world map, and flags anything that looks suspicious. Click a destination on the Watchtower for its country and city, owning organization, reverse DNS, protocol, port, byte counts, duration, and responsible app or device; filter by device, app, country, organization, or protocol, or scrub back through history. Radio Chatter streams the DNS lookups it can see, surfaces first-seen domains, and labels tracker, ad, telemetry, and malware domains without ever blocking them. The Precinct Map diagrams observed traffic, while the Roster inventories every device by IP, MAC, manufacturer, hostname, inferred type, and services, and alerts you when an unrecognized one joins. The Wanted List applies eight rules, including beaconing, machine-generated domains, port scans, plaintext credentials, and volume anomalies, and explains each finding in a plain sentence rather than a mystery score. Deputy Mode needs no privileges and names the application behind each connection, while Patrol Mode adds packet capture for DNS lookups and traffic volumes. Pair installations with a code to widen your view, export any view as CSV or JSON, and send alerts to webhook, ntfy, Discord, or Slack. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.