PacketSafari

Spec sheet

What it does

PacketSafari analyzes PCAP, PCAPNG, and CAP files for root-cause and security investigations, returning packet-linked evidence and reports.Read 15 Oct 2026 · app.packetsafari.com

Purpose

PacketSafari investigates packet captures for root-cause, performance, and security questions and returns findings linked to packet evidence.Read 30 Sep 2026 · packetsafari.com

Intended users

The pricing page describes the product as built for network, support, engineering, security, and assurance teams that need reviewable packet-level findings.Read 30 Sep 2026 · packetsafari.com

API

The on-prem HTTP streaming API uses POST /api/v2/ai/agent/run with bearer authentication and supports cli, tshark, and standard modes.Read 15 Oct 2026 · app.packetsafari.com

Integrations

Security intelligence sources can include ET Open, abuse.ch SSLBL and URLhaus, and Stamus lateral-movement feeds.Read 15 Oct 2026 · packetsafari.com

Headquarters

Valencia, SpainRead 28 Sep 2026 · packetsafari.com

Maker

PacketSafari is built by Ripka Technologies S.L., a Spanish limited company registered in Spain with an address in Valencia.Read 30 Sep 2026 · packetsafari.com

Agent

PacketSafari Agent plans investigation tasks, examines bounded packet evidence, forms hypotheses, and produces persisted report milestones.Read 15 Oct 2026 · app.packetsafari.com

AI data flow

When enabled, selected bounded packet context, prompts, results, and outputs may be sent to OpenAI or an approved OpenRouter-backed provider; whole large captures are not sent as one prompt.Read 15 Oct 2026 · packetsafari.com

AI limitation

PacketSafari warns that AI output can be incomplete, inaccurate, inconsistent, or overconfident and requires verification against cited evidence.Read 15 Oct 2026 · packetsafari.com

Analyzer

The browser analyzer includes Wireshark-style filters, packet lists, decode and hex views, stream following, timelines, graphs, statistics, security, DNS, TLS, files, OT, telco, VoIP, Wi-Fi, multicast, and export tools.Read 15 Oct 2026 · app.packetsafari.com

Anonymization

Anoncap creates anonymized sibling captures with deterministic identity mappings, metadata sanitization, payload controls, and protocol-aware rewriting.Read 15 Oct 2026 · app.packetsafari.com

Anonymization limitation

Unsupported or encrypted values may remain in anonymized captures, especially when application payload is retained.Read 15 Oct 2026 · app.packetsafari.com

Capture limit

The pricing page lists a target of up to 1 GB per capture for SaaS and qualified profiles, with supported profiles confirmed against representative captures and deployment.Read 30 Sep 2026 · packetsafari.com

Capture-size limitation

Hosted SaaS ceilings are 1 MB for Analyzer Free, 200 MB for Copilot Pro and individual Agent Pro, and 1 GB for qualified enterprise workspaces.Read 15 Oct 2026 · app.packetsafari.com

CLI

The native CLI supports login, PCAP upload, status checks, analysis, combined upload-and-analysis, SSE, NDJSON, JSON, and Markdown output.Read 15 Oct 2026 · app.packetsafari.com

Company founder

The company page identifies Oliver Ripka as the founder associated with PacketSafari's packet-analysis work.Read 15 Oct 2026 · packetsafari.com

Company headquarters

The company lists Calle Peris Brell 7 Trip Bajo, 46022 Valencia, Spain.Read 15 Oct 2026 · packetsafari.com

Company legal name

PacketSafari is operated by Ripka Technologies S.L., a Spanish limited company with VAT ID ESB02732717.Read 15 Oct 2026 · packetsafari.com

Compliance posture

PacketSafari states that it does not currently have a SOC 2 Type I or Type II report, certification, or audit attestation.Read 15 Oct 2026 · packetsafari.com

Copilot

Copilot provides conversational answers about captures and derived evidence.Read 15 Oct 2026 · packetsafari.com

Deployment options

PacketSafari offers managed SaaS in the EU or US, isolated managed SaaS, and customer-controlled on-premises deployment.Read 30 Sep 2026 · packetsafari.com

Desktop app

PacketSafari Desktop is a private-alpha macOS application that captures traffic locally, supports decryption, and cites findings to frames.Read 15 Oct 2026 · packetsafari.com

Documentation

Public documentation covers getting started, uploads, analyzer features, anonymization, security, settings, on-prem deployment, API, CLI, and troubleshooting.Read 15 Oct 2026 · app.packetsafari.com

Evidence

Reports can include exact frames, filters, streams, timestamps, decoded fields, uncertainty, and next actions for review by another engineer.Read 30 Sep 2026 · packetsafari.com

Identity support

SAML or OIDC browser SSO and SCIM provisioning are available in on-premises deployments, according to the security page.Read 30 Sep 2026 · packetsafari.com

Independent background

TÜV Rheinland's interview says Oliver-Tobias Ripka has more than 15 years of network-analysis experience and developed PacketSafari Analyzer on Wireshark.Read 15 Oct 2026 · akademie.tuv.com

Independent collaboration

Wireshark Labs announced a training-lab collaboration involving Oliver Ripka of PacketSafari and Packet Pioneer’s Chris Greer.Read 15 Oct 2026 · linkedin.com

Independent feature mention

PacketSafari's LinkedIn showcase describes Agent workflows with Suricata ET Open scans, telephony visibility, forensic file extraction, and cited packet evidence.Read 15 Oct 2026 · linkedin.com

Independent product description

TÜV Rheinland describes PacketSafari Analyzer as a free, cloud-based Wireshark alternative used by people worldwide to upload and analyze PCAP files.Read 15 Oct 2026 · akademie.tuv.com

Initial analysis

The site says an initial analysis takes about two minutes after the capture is ready, with timing varying by capture size, packet count, protocols, and runtime load.Read 30 Sep 2026 · packetsafari.com

Integrations and automation

The listed plans include a headless Agent API, CLI output in SSE, NDJSON, JSON, or Markdown, service accounts, scoped ingestion keys, and available OEM or protocol integration.Read 30 Sep 2026 · packetsafari.com

Investigation workflows

RCA workflows compare healthy and failing traffic and investigate service-path issues, while security workflows examine suspicious traffic and affected peers or protocols.Read 30 Sep 2026 · packetsafari.com

License scope

The main PacketSafari service is commercial, while anoncap is described as an open-source CLI built in a PacketSafari Wireshark fork; the pages do not state a specific open-source license.Read 15 Oct 2026 · app.packetsafari.com

Limit: third-party test

A SharkFest Europe presentation reported that PacketSafari Analyzer Pro with Copilot had a 250-frame limit in one WLAN test.Read 15 Oct 2026 · staging.sharkfest.wireshark.org

News: Anonymizer release

On October 7, 2026, PacketSafari announced Anonymizer version 0.1.1 for macOS and Windows and anoncap CLI 4.7.3.Read 15 Oct 2026 · packetsafari.com

News: changelog

The June 8, 2026 changelog entry says PacketSafari added clearer AI-mode controls, improved Agent reattachment, and fixed duplicate streamed final answers.Read 15 Oct 2026 · packetsafari.com

On-premises data boundary

The maker says on-premises deployments keep full captures and persisted investigation outcomes inside customer-controlled storage and route bounded evidence only through an approved endpoint and explicit egress policy.Read 30 Sep 2026 · packetsafari.com

Release attestation

The security page says provenance inventory and release evidence manifests exist, while signed attestation outputs remain pending.Read 30 Sep 2026 · packetsafari.com

Root-cause analysis

The RCA workflow compares healthy and failing traffic, isolates decisive sequences, and identifies the team responsible for the next action.Read 15 Oct 2026 · packetsafari.com

Security controls

The Trust Center states that TLS protects browser and API traffic, capture storage uses encrypted EBS volumes and snapshots, MFA and audit events are implemented, and SBOM and dependency scans support release checks.Read 15 Oct 2026 · packetsafari.com

Security investigations

Security workflows examine suspicious traffic, affected peers, protocol paths, and evidence behind alerts.Read 15 Oct 2026 · packetsafari.com

Self-hosting

Enterprise On-Prem keeps captures, identity, storage, retention, AI endpoints, and egress inside customer-controlled infrastructure.Read 15 Oct 2026 · packetsafari.com

System requirements

The Anonymizer supports macOS 14 or later on Apple silicon and Windows 10 or 11 on x64; anoncap CLI bundles target Linux x64, macOS Apple silicon or Intel, and Windows x64.Read 15 Oct 2026 · packetsafari.com

Triage

Triage supplies complete signal coverage below 50 MiB and otherwise covers the first 1,000,000 frames initially, with later owner or admin full scans.Read 15 Oct 2026 · app.packetsafari.com

Plans and prices

Every PacketSafari plan and price →

Where Specifiction places it

• Network Packet Analyzer Software#5 of 328.6