Fleet
Real bindings across machines
Process identity, bind address, health, and relations from a single host or a paired fleet.
See every listening port.
Control it without chaos.
A local-first agent for developers and operators. See every listening port on Windows and Linux, diagnose health, and act through an allowlisted helper — no shell. Pair to Cloud when you want a fleet view.
Windows 10/11 x64 · Linux x86_64 · Cloud optional
Product
Built like infrastructure software, not a toy dashboard.
PortPilot is port-centric: listen, diagnose, and act with the same guards whether you use the website, CLI, or command palette.
01
Agent on the machine
Discovery runs where the sockets live. Windows and Linux agents speak the same protocol.
02
SQLite history
Port events survive restarts. Search and timeline stay local until you choose to sync.
03
Allowlisted helper
Kill, service, and firewall go through ProcessGuard. There is no shell API.
04
Optional cloud fleet
Pair machines for a dashboard. Local observation keeps working when cloud is offline.
Discovery & health
Layered diagnosis you can trust
Listening sockets, process identity, and deterministic health layers - including Unknown when we refuse to invent reachability.
- Listener, process, local, and application layers
- History that survives restarts
- Same model on Windows and Linux
Safe controls
Act without a shell
Kill, service start/stop/restart, and PortPilot-named firewall rules go through an allowlisted helper. The agent validates every action independently of the UI.
- ProcessGuard on destructive actions
- CSRF and ownership on cloud paths
- No arbitrary exec API
Awareness
Docker, proxies, and tunnels in context
See how a port relates to container publishes, nginx/Caddy/Traefik/Apache routes, and ngrok tunnels - read-only awareness, not another CLI to babysit.
- Docker Engine mappings on host ports
- Reverse proxy route inspection
- API-driven ngrok tunnels (Pro)
Command palette
Typed commands. Same guards.
Diagnose, kill, firewall, and fleet filters from Cmd+K. Offline machines stay blocked; destructive actions still confirm.
- Deterministic command parsing
- Same entitlement gates as the UI
- Keyboard-first operator flow
How it works
Agent first. Cloud optional.
- 01
Install the agent
Run PortPilot on each host. It discovers listening ports and stores history locally in SQLite.
- 02
Pair a machine
Create a short-lived pairing code. The agent enrolls with an Ed25519 device key - outbound WebSocket only.
- 03
Observe and control
Use the website or CLI for fleet views, diagnose, kill, firewall, and tunnels - with CSRF, ownership, and entitlements enforced.
Who it is for
Developers and operators, not a generic control plane.
Use PortPilot when you need to see what is listening, why it is unhealthy, and act without opening a shell — on a laptop, a homelab, or a small Windows/Linux fleet.
Windows + Linux
x64 Windows 10/11 via MSI. x86_64 Linux with systemd via install script. macOS and Windows ARM64 are not supported.
DownloadLocal-first, Cloud optional
Discovery and history live on the host. Pair a machine when you want the website dashboard. Cloud sync, notifications, and backups are a separate subscription.
What Cloud addsPlans
Serious software pricing.
Start free on one machine. Unlock advanced controls for life, or add cloud sync when you want fleet continuity. Checkout adapts to your local currency where Stripe supports it.
Free
Local-first observation and core controls
£0
1 machine · forever
- Port discovery & history
- Health layers & diagnose
- Kill / service start·stop·restart
- CLI + local agent
Pro
Advanced controls for serious hosts
£99
Lifetime · 1 machine
- Everything in Free
- Firewall allow / block
- Tunnels (ngrok)
- Multi-machine entitlements
- £5/mo off Cloud while Pro is active
Cloud
Fleet sync and account continuity
£150
Billed yearly · 3 machines default · save vs monthly
- Everything in Pro
- Durable history sync
- Notifications
- Account backups
- Seats = max(Pro seats, 3)
GBP list prices. Checkout adapts to local currency where Stripe supports it. Manage licences in Settings → Billing. Lifetime Pro upgrades are 10% off; active Pro includes £5/mo off Cloud. AppSumo deal prices are listed separately on the AppSumo page.
FAQ
Straight answers.
Yes. The agent discovers ports, stores history in SQLite, and talks to the CLI over local IPC. Cloud pairing is optional for fleet views, sync, notifications, and backups.
Only an allowlisted set of operations: ping, kill with ProcessGuard, service control, and PortPilot-named firewall rules. There is no shell or arbitrary exec API.
Free covers observation and core process/service controls on one machine. Pro is a lifetime licence by machine tier and adds firewall mutate, ngrok tunnels, and extra machines. Cloud is a subscription that includes the Pro feature set plus durable sync, notifications, and account backups. Active lifetime Pro takes £5/month off Cloud.
Machine state stays on the host by default. Paired machines can sync selected history to PortPilot Cloud. Account backups cover prefs and display metadata — not credentials.
No. Agents open an outbound WebSocket to the cloud gateway. Browsers never talk directly to a privileged local agent.