TRACEDSee what your apps
are really doing.
Traced watches any Windows app in real time and shows exactly what it connects to, what it looks up, and what it touches on disk. No guessing, no trusting marketing copy — including this one.
See everything, live.
- Every connection, lookup, and file event — network connections, DNS lookups, and file create/write/rename/delete — as it happens, not reconstructed afterward.
- Catch the very first move. Pick any running app with one click, or launch one fresh to see its startup phone-home calls and first-run telemetry — not just what it does once it's already settled in.
Nothing hides in a child process.
Modern apps aren't one process. Browsers and Electron apps split into renderer, GPU, and network-service processes that do the actual work. Traced automatically follows the whole process family, so activity can't slip through by hiding one level down.
- discord.exe · renderer
- discord.exe · gpu-process
- discord.exe · utility: network service
↑ the actual connection happens here — Traced still sees it.
Know who it's really talking to.
- Real hostnames, not raw IPs. Every connection is cross-referenced against the app's own DNS lookups, so you see the real hostname behind an IP address.
- Checked against 78,000+ tracker domains. Every connection and lookup is matched against a list of known tracker and ad domains, flagged instantly.
A verdict, not a wall of logs.
- Filter instantly by type — All, Connections, DNS, or Files — with running counts on every tab.
- Stop and get a clean summary: total activity, tracker hits, and every host contacted, ranked by frequency.
- Export the full session as JSON — a portable record you can save or share.
Session summary
00:00.000 – 00:05.115Built to be trusted itself.
Local by design
100% local. Traced never sends your data anywhere — the only thing it ever fetches is a public tracker-domain list, once a day, to keep its own detection current. Every entry is signal, not noise: one row per real connection, not per packet; one per meaningful file write, not per byte.
Native & lightweight
A compact, modern 64-bit Windows app — not a browser extension, not a cloud dashboard, nothing phoning home to a vendor. Install it, run it, close it. Nothing left listening.
Fixed by catching it doing the wrong thing.
Every accuracy fix in Traced was driven by real use, not guesswork — the kind of detail that only shows up once an app misbehaves in front of you.
Process ID reuse was causing activity to be attributed to the wrong app.
IPv6 literal addresses were failing to decode into hostnames.
Get Traced.
Free for Windows. Linux and macOS builds are coming next.
Trust, but verify — for software.
Traced is a native, 64-bit Windows app built to answer one question honestly: what is this thing actually doing? Linux and macOS are next.