Straight answers for the trail

Pro unlocks the whole corral beyond the nine free tools: packet capture, topology, drift detection, SNMP, the console, the encrypted Vault, the AI Deputy and Posse, and more. It's $499, one time, for a single engineer.

Yes. One purchase covers the desktop app on Windows, macOS and Linux. The Mac app isn't out yet; when it ships, the same license unlocks it.

No subscription, no annual fee and no paid upgrades. Every update is included — new tools and new major versions too.

Yes. Sign in with your email to start a 30-day Pro trial that unlocks every tool. No card is needed, and it's one trial per email address.

Install the app, sign in with your email (we send a one-time code; there's no password), then click Buy Pro. Checkout opens Stripe in your browser, and Pro unlocks on your account as soon as the payment clears. Stripe handles the card and emails your receipt; we're only told the payment succeeded.

If Pro isn't for you, email sheriff@subnetslinger.com within 14 days of purchase and tell us the email you paid with. We'll refund it and switch the license off. The full wording is in the Terms of Use.

Yes, on request. Email sheriff@subnetslinger.com with how many engineers you're outfitting and we'll set you up. A standard Pro license is for one engineer.

Sign in on the new machine with the same email and Pro turns back on, whether it's Windows, macOS or Linux. The license covers one engineer on the machines you use. Your work doesn't travel with the license, so bring it across with Back up & restore (see below).

Windows: the Microsoft Store. Linux: a GPG-signed .tar.gz for 64-bit x86-64 from the Download page. Android: free on Google Play. iPhone and iPad: free, currently in App Store review. macOS: coming soon as a direct download.

iPhone and iPad are both in App Store review, and we'll link them here once Apple approves them. The Mac app is a native build that will ship as a notarized direct download from our site, not through the Mac App Store, and it needs macOS 14 Sonoma or later. Keep an eye on the Download page.

Windows 10 (1809 or later) or 11, 64-bit; 64-bit Linux (x86-64) such as Ubuntu 20.04+, Debian 11+ or Fedora 38+; or macOS 14 Sonoma or later. The minimum is a 64-bit dual-core CPU, 8 GB of RAM, about 500 MB of disk and a 1280×800 display, and the app bundles its own runtime. Running AI locally with Ollama needs a much bigger machine; cloud AI doesn't. See Setup.

The iPhone, iPad and Android apps are free field companions with a focused set of around 30 tools, so you can run checks from whatever device you've got. They're free for everyone, with nothing to buy inside them. You don't need the desktop app or a Pro license to use them. The iPad app is its own build for the bigger screen, not a stretched phone app.

Not today. Linux ships as the GPG-signed .tar.gz on our Download page (OS-managed store packaging is planned for a future release). If you see SubnetSlinger in a Linux store or package repo now, it isn't from us.

Your scan results, captures, inventory, incidents and Vault stay on your computer and aren't uploaded to us. Other traffic comes from things you run or turn on: internet lookups (DNS, WHOIS, public IP, MAC vendor, speed test), cloud AI with your own key, and your account (sign-in, license check, Stripe checkout). The Privacy page lists each service and what it sends.

No. The app doesn't collect analytics, usage tracking or telemetry. If you're signed in, it checks your license with our licensing service on launch (on macOS, when you first open Account) — sending an account token and getting back your tier, not your network data. On the free tier with no account, there's no licensing traffic at all.

For a license: your email address, a random account ID, your tier, when your trial started and, if you buy, that a payment succeeded and for how much. We don't ask for card details, a password, a phone number or a home address. The free tier needs no account.

In a folder on your own computer: %APPDATA%\SubnetSlinger on Windows and ~/.config/SubnetSlinger on Linux. There's no cloud sync, so your account doesn't hold a copy.

Use File › Back up & restore your work. It saves your inventory, incidents, runbooks, saved maps, watch lists, saved hosts, themes, MCP server setups and activity log to one .ssbackup file you can keep wherever you like, then restores it on the new machine. It deliberately leaves out Vault secrets, SSH host keys (so you re-confirm each server's fingerprint) and your license (just sign in again).

Yes. Email sheriff@subnetslinger.com and we'll delete it. Your network data was never in your account to begin with.

Your choice. The Deputy (an assistant that runs the tools and explains what it finds) and the Posse (a multi-agent network sweep) are optional, off by default and part of Pro. With your own key, requests go straight from your machine to Anthropic, OpenAI (or any OpenAI-compatible endpoint) or Google Gemini, not through us. With Ollama, the model runs on your machine or on a server you control.

For cloud AI, yes. You bring your own key and the provider bills you directly, with no markup from us. Local AI through Ollama needs no key and has no per-token cost. You can store cloud keys in the encrypted Vault or enter them each session.

Before your message and tool output go to a cloud provider, SubnetSlinger strips the secret-shaped text it recognizes — device passwords, SNMP/TACACS+/RADIUS keys, private keys and API tokens. It's a pattern match, not an absolute guarantee, and a secret with no recognizable shape can slip through. For anything truly sensitive, use local Ollama so the conversation stays on your machine. The Deputy also has no access to the credentials stored in your Vault.

It depends mostly on memory. A small 7–8B model is the floor, and around 32 GB of RAM (helped by a GPU or Apple Silicon) runs a more capable 14–32B model. On smaller machines, answers can be slower and weaker, especially on long multi-step investigations. You'll also need a model that supports tool calling, such as llama3.1, qwen2.5 or mistral.

The Deputy's built-in tools are read-only: no SSH command execution, no file transfer, no config changes. If you connect outside MCP servers, their state-changing tools stay blocked unless you turn on that server's "writes" switch, which is off by default. The Posse keeps every MCP tool read-only. AI answers can be wrong, so verify before you act.

The Vault encrypts what you store with AES-256-GCM on your machine, unlocked by your passphrase, and the app doesn't transmit it. How the encrypted file travels depends on your OS. On Windows you can optionally bind it to the device so a copy won't open elsewhere. On macOS (when it ships) it uses your login Keychain and moves with Time Machine and Migration Assistant. On Linux it's protected by your passphrase or recovery code and opens on another machine with either one. If you lose those, or a device-bound Windows machine, we can't recover the secrets for you.

Windows comes from the Microsoft Store, which signs and hosts the package, so there's nothing to check by hand. For Linux, check the SHA-256/512 checksums, then verify the GPG signature and confirm the key fingerprint 6285 1F0E BBD5 AA9D 6E3C E11A 9433 D73B DB83 622C; the steps are on the Setup page. The Mac app will be signed with an Apple Developer ID and notarized by Apple, so macOS can check it before it opens.

Mac App Store apps must run inside Apple's App Sandbox, which would block things a network toolkit needs: running tcpdump and ssh, reading the ARP table, talking to serial consoles and hosting local servers. So the Mac app ships as a direct download instead, signed with an Apple Developer ID, built with Apple's hardened runtime, and notarized by Apple.

For Linux, yes. A CycloneDX SBOM sits next to the tarball on the Download page, covered by the GPG signature and scanned for known-vulnerability advisories. A macOS SBOM isn't on the Download page yet, and Windows, which installs from the Microsoft Store, doesn't have a separately published SBOM today.

AISMITH PDX LLC, a small shop in Oregon, USA. The Linux signing key is issued to "SubnetSlinger (AISMITH PDX LLC)", and the sheriff's office is sheriff@subnetslinger.com.

Nine tools, free for good and with no account: Ping, Traceroute, Path ping, Port scanner, DNS lookup, Subnet calculator, ARP table, MAC/OUI lookup and Discovery. Everything else unlocks with the 30-day trial or Pro.

On every desktop, the Deputy can connect out to your own MCP tool servers — vendor devices, a source of truth or monitoring. Running SubnetSlinger itself as an MCP server, so another AI app can call its tools, is only in the Windows build for now; the Linux build doesn't include it yet. See How MCP fits together.

Use the feedback form or email sheriff@subnetslinger.com with the app version, your OS, what you did, what you expected and what happened. A screenshot helps. Please don't include Vault contents, API keys or production passwords.

Email sheriff@subnetslinger.com and a real engineer reads it, weekdays, Pacific Time, usually within one business day. We're a small shop in Oregon, not a 24/7 helpdesk. See Support.

On the Reviews page. We read reviews before publishing them, and approved ones appear with the name you sign them with. To remove one, email sheriff@subnetslinger.com.

Every release, and every fix, is reviewed and lab-checked before it ships. Testing runs on physical devices for every platform and against real Cisco switches and UniFi gear.