Network Toolbox by SiggySoft

A CISO-grade network diagnostics app for Android, made by SiggySoft LLC

What it does

Network Toolbox puts 13 network diagnostic tools on your phone: ping, traceroute, a TCP port scanner with banner grabbing, a subnet calculator (VLSM, subdivide, supernet, EUI-64), DNS lookups with record-type selection, WHOIS, TLS certificate inspection, HTTP header analysis with security grading, a speed test, a bandwidth monitor, Wake-on-LAN, and number/address converters for IP, MAC, ports and bases. It has no ads, needs no account and collects no data.

Diagnostics and discovery

ICMP ping with live latency charts, hop-by-hop traceroute, TCP port scanning with configurable concurrency and banner identification for 16 protocols, and LAN discovery via ping sweep.

Subnet math and conversions

IPv4 and IPv6 subnet calculation, VLSM planning, network aggregation, EUI-64 address generation, plus IP/MAC/port/base number conversions with a 200-port IANA service lookup.

Security inspection

TLS certificate chain inspection with expiry alerts and SAN listing, HTTP security header grading following Mozilla Observatory methodology, and raw DNS queries for SOA, MX, TXT, CAA and other record types.

Private by design

All diagnostics run on the phone. The app sends traffic only to the hosts you test. No telemetry, no analytics, no background connections.

Get the app

Android 8.0 or newer: download below
Google Play: coming soon
iPhone: App Store coming soon
No account, no ads, no tracking

Download for Android →

Version 1.0.1 · nettoolbox-1.0.1.apk · 1.4 MB
SHA-256 b5d2f9fb36076923bcbe01dec4714e29618acba7fc16ed91a49b2ad86649c134

Installing the Android download

Until the app is on Google Play, Android asks you to allow the install once.

Open this page on the phone in Chrome and tap Download for Android.
When the download finishes, tap Open, or find nettoolbox-1.0.1.apk in the Files app under Downloads.
If Android says the phone is not allowed to install unknown apps from this source, tap Settings, turn on Allow from this source, then go back.
Tap Install.
Open Network Toolbox. The dashboard shows your current connection; tap any tool to start using it.

If Google Play Protect says it does not recognize the app, tap More details, then Install anyway. Letting it scan the app first is fine. A newer version installs over the old one and keeps your settings and Wake-on-LAN devices.

Tools included

Tool	What it does
Dashboard	Connection type, local and public IP, gateway, DNS servers, Wi-Fi SSID and link speed on one screen, with a grid of all 13 tools.
Ping	ICMP ping with configurable count, interval and payload size, live min/avg/max/jitter statistics, packet loss, and a latency chart.
Traceroute	Hop-by-hop path to a host with RTT per hop, up to 30 hops, showing each router's IP address or * for non-responding hops.
Port Scanner	TCP connect scan on single ports, ranges or comma-separated lists, with 50-thread concurrency, configurable timeouts, and banner grabbing that identifies SSH, HTTP, SMTP, FTP, MySQL, MariaDB, Redis, PostgreSQL, MongoDB, VNC, RDP and more.
DNS Lookup	Raw DNS queries (A, AAAA, MX, NS, CNAME, SOA, TXT, SRV, PTR, CAA) against any resolver, with TTL and full record data. Uses the phone's resolver or a custom one.
WHOIS	Domain registration data via TCP port 43, with automatic referral following to the authoritative registrar.
Subnet Calculator	Five tabs: Calculate (IPv4 or IPv6 CIDR to network, broadcast, mask, wildcard, host count, binary), Subdivide (split a block into smaller prefixes), VLSM (plan variable-length allocations), Supernet (aggregate adjacent blocks), and EUI-64 (generate an IPv6 address from a MAC).
Number Converter	Four tabs: IP (to binary, hex, integer and back), MAC (normalize, Cisco notation, binary), Port/Service (200 IANA port lookups in both directions), and Number Base (decimal, hex, binary).
TLS Inspector	Connect to any HTTPS host and see the certificate chain: subject, issuer, validity dates with days-until-expiry coloring, SANs, key type and size, and serial number.
HTTP Headers	HEAD request with full response headers, redirect chain display, and a security grade (A through F) following Mozilla Observatory methodology for HSTS, CSP, X-Content-Type-Options, X-Frame-Options and Referrer-Policy.
Speed Test	Download speed measurement with a live Mbps chart and peak/average readings. Uses a configurable test URL.
Bandwidth Monitor	Live receive and transmit rates from Android TrafficStats, with a dual-line chart and cumulative totals since monitoring started.
LAN Discovery	Ping sweep of the local subnet to find reachable hosts, with TCP port probes on common services.
Wake-on-LAN	Send a magic packet to wake a device by its MAC address. Saves devices for quick access.
IPv4 Info	Current IPv4 configuration, RFC 1918 private ranges, special-use address blocks, and a subnet mask reference table.
IPv6 Info	Current IPv6 configuration, address scope definitions, multicast scope table, and common prefix length reference.
Settings	Theme (system, light, dark), ping parameters, scanner concurrency and timeout, traceroute max hops, speed test URL, and an about section with version and build info.

Privacy

Network Toolbox sends traffic only to the hosts and ports you choose to test. It has no analytics, no telemetry and no background network activity. The privacy policy covers the app in full.