Skip to content
SPECIFICTION
Get listed

A-Packets

apackets.com

From $8.25/mo Free plan WebLinuxAPISelf-hosted
Visit apackets.com
Spec score 9.4 #1 of 32 in Network Packet Analyzer Software

What it is

A-Packets analyzes PCAP and PCAPNG captures for incident response, forensics and protocol inspection. It reconstructs HTTP sessions, maps communicating hosts and services, examines wireless artifacts, extracts files, identifies credential exposure and flags suspicious events. The hosted analyzer accepts native capture files from tools such as Wireshark and tcpdump. Public analysis costs nothing, requires no signup and accepts uploads up to 25 MB, but the resulting page is public. Private workspace plans include reports and a REST API key: Starter Workspace (monthly) is $11.99 a month, Professional (monthly) is $24.99 a month, and Advanced (monthly) is $49.99 a month. Yearly workspaces are $99 a year, $199 a year and $399 a year, respectively. One-time packs cost $14.99 as a one-time purchase, $44.99, paid once or $99.99, paid once. Subscription analyses have permanent private storage; credit-pack reports are deleted after 30 days. OnPrem supports customer-controlled storage and air-gapped deployments, but analyzes captures case by case and does not decrypt TLS payloads, capture continuously or alert.

Spec sheet

What it does
A-Packets analyzes PCAP and PCAPNG captures for incident response, forensics and protocol inspection.Read 15 Oct 2026 · apackets.com
Purpose
A-Packets analyzes PCAP and PCAPNG captures for incident response, forensics, and protocol inspection.Read 9 Oct 2026 · apackets.com
Audience
The maker identifies SOC, DFIR, incident response, network security, network operations, MSSP, integration, and forensic teams as intended OnPrem users.Read 9 Oct 2026 · apackets.com
Deployment
OnPrem supports Docker Compose, Kubernetes with Helm, and air-gapped deployments, with captures and reports stored in infrastructure controlled by the customer.Read 9 Oct 2026 · apackets.com
API
The automation API supports PCAP upload, scheduled analysis and integrations; the REST upload endpoint uses a Bearer API key.Read 15 Oct 2026 · apackets.com
Integrations
OnPrem supports local passkey two-factor authentication, LDAP/Active Directory, SAML 2.0, OAuth through Google, Microsoft, and GitHub, and SCIM provisioning.Read 9 Oct 2026 · apackets.com
Support
OnPrem inquiries normally begin with a 30-minute fit call, and the maker says it replies to requests within two business days.Read 9 Oct 2026 · apackets.com
Analysis
The analyzer reconstructs HTTP sessions, maps communicating hosts and services, reviews wireless artifacts, extracts files, identifies credential exposure, and flags suspicious events.Read 9 Oct 2026 · apackets.com
API availability
The pricing page lists a REST API key on Starter Workspace, Professional and Advanced private plans.Read 15 Oct 2026 · apackets.com
Availability limitation
The terms warn that service availability, processing and results can be delayed, incomplete or inaccurate and are not guaranteed.Read 15 Oct 2026 · apackets.com
Cloud infrastructure
Uploaded PCAP files and related data are stored using AWS S3 currently in the United States and MongoDB Atlas, whose region depends on the selected cluster and may include the United States.Read 9 Oct 2026 · apackets.com
Cloud security
The maker says it encrypts data in transit and at rest, isolates private captures, and restricts personal information access to authorized personnel.Read 9 Oct 2026 · apackets.com
Company disclosure
The About page identifies A-Packets as an EU-based vendor but does not state a legal entity name, headquarters city, employee count or funding.Read 15 Oct 2026 · apackets.com
Credential detection
Credential analysis covers HTTP Basic/Digest, SIP Digest, SMB, NTLM, Kerberos, LDAP, PostgreSQL, MSSQL, Telnet and FTP artifacts.Read 15 Oct 2026 · apackets.com
Data residency
Hosted captures are stored in AWS S3 in the United States and MongoDB Atlas in a region dependent on the cluster.Read 15 Oct 2026 · apackets.com
Event detection
The analyzer highlights scans, insecure credential use and other suspicious patterns for analyst review.Read 15 Oct 2026 · apackets.com
File extraction
A-Packets extracts images, office documents and other files embedded in captured traffic.Read 15 Oct 2026 · apackets.com
Hosted scale
The About page reports more than 371,000 captures analyzed on the hosted service.Read 15 Oct 2026 · apackets.com
HTTP reconstruction
The service rebuilds HTTP requests, responses, headers, forms and transferred content from captures.Read 15 Oct 2026 · apackets.com
Identity integrations
OnPrem supports passkey 2FA, LDAP/Active Directory, SAML 2.0, OAuth providers and SCIM provisioning.Read 15 Oct 2026 · apackets.com
Independent caution
The same write-up cautions readers to avoid uploading captures containing WPA handshakes, plaintext passwords or hashes when confidentiality matters.Read 15 Oct 2026 · 05t3.github.io
Independent domain fact
ScamAdviser reports a WHOIS registration date of 2019-04-11 and hosting through DigitalOcean.Read 15 Oct 2026 · scamadviser.com
Independent trust assessment
ScamAdviser describes apackets.com as very likely legitimate and notes its valid SSL certificate.Read 15 Oct 2026 · scamadviser.com
Independent use example
A security-training write-up uses A-Packets to identify a web server, malware delivery details and exfiltrated credentials from a capture.Read 15 Oct 2026 · 05t3.github.io
Limit: Cloud-policy objection
A LinkedIn commenter described uploading PCAPs to a cloud platform as unacceptable for environments that prohibit such transfers.Read 15 Oct 2026 · fr.linkedin.com
Limit: Sensitive-data risk
Another LinkedIn commenter warned that uploading PCAPs can expose infrastructure maps and sensitive information.Read 15 Oct 2026 · fr.linkedin.com
Limit: Upload privacy concern
A LinkedIn commenter questioned what uploaded data is covered by the privacy terms and said the wording appeared focused on contact data.Read 15 Oct 2026 · fr.linkedin.com
Network mapping
It maps communicating hosts and services using passive fingerprinting, including DNS, DHCP and LDAP observations.Read 15 Oct 2026 · apackets.com
Notable news
A-Packets published a June 23, 2026 walkthrough analyzing a macOS ClickFix capture involving keychain and browser-cookie theft.Read 15 Oct 2026 · apackets.com
OnPrem limits
OnPrem analyzes captures case by case and does not decrypt TLS payloads, capture traffic continuously, alert, or replace SIEM, IDS, or NDR platforms.Read 9 Oct 2026 · apackets.com
OnPrem security
The OnPrem platform says it sends no capture data, telemetry, or license checks to A-Packets, and uses signed container images with an SBOM for each image.Read 9 Oct 2026 · apackets.com
OnPrem sizing
The OnPrem guide lists a minimum of four CPU cores, 8 GB RAM and 50 GB disk, with higher recommended values.Read 15 Oct 2026 · apackets.com
Operational integrations
OnPrem exposes Prometheus apackets_* metrics, health probes, Grafana dashboards and alert rules.Read 15 Oct 2026 · apackets.com
Praise: Ecosystem visibility
The Wireshark Wiki lists A-Packets as a monitoring/tracing tool that reads PCAP files, analyzes common protocols, maps network structure and extracts transferred files.Read 15 Oct 2026 · wiki.wireshark.org
Praise: Practical training use
A Packt digital-forensics chapter demonstrates uploading a malware PCAP and receiving an automatically generated, detailed categorized findings breakdown.Read 15 Oct 2026 · subscription.packtpub.com
Private storage
Subscription analyses have permanent private storage controlled by the account holder, while credit pack reports are automatically deleted after 30 days.Read 9 Oct 2026 · apackets.com
Proprietary licensing
Terms reserve ownership of the software, interfaces, workflows, reports and documentation and prohibit copying, reverse engineering, resale and sublicensing.Read 15 Oct 2026 · apackets.com
Public upload privacy
Public analysis creates a public result page, so the maker says to use it only for captures that can be shared publicly.Read 9 Oct 2026 · apackets.com
Retention
Anonymous uploads are deleted at least every 24 hours; credit-pack reports are retained 30 days; subscription storage remains until user deletion.Read 15 Oct 2026 · apackets.com
Security controls
The security page states encryption in transit and at rest, access controls, firewalls and monitoring for hosted data.Read 15 Oct 2026 · apackets.com
Self-hosting
OnPrem is delivered through Docker Compose, Kubernetes/Helm or a signed air-gapped bundle.Read 15 Oct 2026 · apackets.com
Supported inputs
The hosted analyzer processes native .pcap and .pcapng files generated by standard capture tools such as Wireshark and tcpdump.Read 9 Oct 2026 · apackets.com
System requirements
The Docker Compose deployment requires Ubuntu 22.04 LTS or RHEL 8+, Docker Engine 24+, at least 8 GB RAM and 80 GB free disk.Read 15 Oct 2026 · apackets.com
TLS analysis
TLS processing reports metadata, certificate anomalies, ciphers and IP details but does not decrypt TLS payloads.Read 15 Oct 2026 · apackets.com
Wireless analysis
Wireless findings include SSIDs, access points, probe requests, multicast traffic and WPA/WPA2 handshake export to HCCAPX.Read 15 Oct 2026 · apackets.com

Plans and prices

Public analysis Free No signup 25 MB upload · public result page · sanitized captures Read 15 Oct 2026 · apackets.com
Public analysis Free No signup; free public analysis. 25 MB per upload · result page is public · sanitized captures Read 9 Oct 2026 · apackets.com
Starter Workspace $11.99 a month Per Month 25 MB file · 10 private files · private reports · REST API key Read 15 Oct 2026 · apackets.com
Starter Workspace (monthly) $11.99 a month Per Month 25 MB file size · 10 private files · private reports · REST API key Read 9 Oct 2026 · apackets.com
Starter Pack $14.99, paid once One-time payment 3 private analyses · 25 MB max size · expires in 6 months Read 9 Oct 2026 · apackets.com
Starter Pack $14.99, paid once One-time payment 3 private analyses · 25 MB maximum · expires in 6 months Read 15 Oct 2026 · apackets.com
Professional $24.99 a month Per Month 50 MB file · 50 private files · private reports · REST API key Read 15 Oct 2026 · apackets.com
Professional (monthly) $24.99 a month Per Month 50 MB file size · 50 private files · private reports · REST API key Read 9 Oct 2026 · apackets.com
Standard Pack $44.99, paid once One-time payment 10 private analyses · 50 MB maximum · expires in 6 months Read 15 Oct 2026 · apackets.com
Standard Pack $44.99, paid once One-time payment 10 private analyses · 50 MB max size · expires in 6 months Read 9 Oct 2026 · apackets.com
Advanced $49.99 a month Per Month 100 MB file · 100 private files · private reports · REST API key Read 15 Oct 2026 · apackets.com
Advanced (monthly) $49.99 a month Per Month 100 MB file size · 100 private files · private reports · REST API key Read 9 Oct 2026 · apackets.com

Every A-Packets plan and price →

Strong points and limits

Strong points

  • Analyzes PCAP and PCAPNG files.
  • Reconstructs HTTP sessions and maps hosts and services.
  • Workspace plans include private reports and a REST API key.
  • OnPrem supports air-gapped deployments.
  • Free public analysis requires no signup.

Limits

  • Public analysis results are visible on a public page.
  • Credit-pack reports are deleted after 30 days.
  • OnPrem does not decrypt TLS payloads or alert.
  • OnPrem analyzes captures case by case.

Who it suits

A-Packets is suited to SOC, DFIR, incident response, network security, network operations, MSSP, integration and forensic teams that analyze packet captures. OnPrem may suit teams needing customer-controlled capture and report storage.

Verdict

A-Packets offers capture analysis through public, private and customer-controlled deployment options, with clear limits for public results and OnPrem processing. Compare file-size, storage and report-retention terms against the way your team handles captures.

Where Specifiction places it

Alternatives to A-PacketsAll alternatives →