See every application on your network.
Live.

FlowLens is a passive, line-rate deep packet inspection probe that turns a mirror port into a real-time picture of your traffic — which applications, which endpoints, how much bandwidth — even when everything is encrypted. One commodity server. No agents. Nothing inline.

Launch live demo Become a design partner
0packet loss in line-rate validation
99.9%of real-world traffic classified
400+application protocols identified
1 sdashboard refresh, always live

Why FlowLens

Port numbers stopped telling the truth years ago. FlowLens reads the traffic itself.

Sees through encryption

Identifies YouTube, Zoom, Microsoft 365, WhatsApp, QUIC and hundreds more inside TLS — using SNI and behavioral fingerprints, not payload decryption. Privacy stays intact.

Line rate on commodity x86

Kernel-bypass packet I/O processes millions of packets per second per core. No proprietary appliance, no hardware lock-in — one server does the job.

Live flow explorer

Every conversation on the wire: both endpoints, ports, detected application, packets, bytes — sortable and filterable, updated every second.

Open JSON API

Stats, flows and history are plain JSON endpoints. Feed Grafana, your SIEM, or your own customer portal — no export tax, no vendor format.

Zero-risk deployment

Purely passive on a mirror/tap port. Nothing sits inline, nothing adds latency, nothing can take your network down.

Instant history

A rolling timeline of throughput and per-protocol rates, so a spike is never a mystery — you see what changed and when.

How it works

Three components, one box.

1

Tap

Mirror your uplink (SPAN/tap) into the FlowLens port. Your traffic path is untouched.

2

Inspect

The capture engine reads packets at line rate and the DPI engine assigns every flow an application identity in real time.

3

See

The dashboard and JSON API serve live counters, protocol breakdowns, flow tables and history — refreshed every second.

Try it right now

This is the actual FlowLens dashboard running on synthetic traffic — the same interface our probe serves live. Filter the flows, hover the charts.

Open the demo full screen ↗

Built for

Network & ISP operations

Capacity planning with application-level truth: how much of the pipe is video, conferencing, or updates.

Enterprise IT & security

Shadow IT discovery and policy validation across managed and unmanaged devices alike.

Telco & 5G edge

An embeddable, passive DPI building block that scales with cores on standard hardware.

MSPs & appliance builders

White-label the dashboard, or build on the open API to differentiate your offering.

Shape the roadmap with us

We're onboarding design partners now. Get early access and direct input on scaling targets, retention and export formats, alerting, and multi-probe dashboards.

Contact us