pwnsy

Anti-Spy Tools

Nine screens for finding surveillance hardware. live from antispy.pwnsy.com

These tools measure what a browser can actually sense: microphone, camera, magnetometer, and public vulnerability data. Where a sensor is missing or a permission is refused, the screen says the test could not run. A screen here never reports a clean room.

Your sensors
checking this browser
Newest camera flaw
CISA KEV, cameras and recorders
Your exit address
asking the API

Sense the room

Use the sensors in the device you are holding.

Ultrasonic Beacons

Watch the 15-24kHz band on your microphone.

Lens Finder

Retroreflection from glass, seen through your camera.

Magnetic Sweep

Field strength near motors, speakers and magnets.

Identify the device

Put a name to hardware you have already found.

MAC Lookup

Who made the device behind an address.

Camera Glasses Guide

Recording indicators on current smart glasses.

Check what is exposed

Public flaws, and what a host actually answers.

Camera CVE Watch

Exploited camera and recorder flaws, by date.

Camera Probe

RTSP and ONVIF handshakes at a host you name.

Work the room

Run the checks in an order that makes sense.

Room Sweep

A checklist that records what you covered.

What these tools cannot do

No radio. A browser has no receiver, so a transmitting bug, a GSM audio device, an analogue camera and a jammer are all silent here. Finding those takes a spectrum analyser or an SDR.

No unpowered devices. A professional sweep uses a non-linear junction detector to find electronics that are switched off. A camera that is powered down is invisible to every screen on this page, apart from its lens.

No wifi or Bluetooth scanning. There is no web API that enumerates what is nearby, so a hidden camera sitting on the wifi never appears in this browser.

No sight of your own network. These pages cannot list your LAN, read your router's client table, or see traffic. The camera probe runs from our server and reaches a public address you type, so it cannot see the network you are sitting on.

A quiet screen is a measurement, and it stays a measurement. It records what one sensor heard or saw in one place over a few seconds. A room is called clean by nobody here.

Why each of those limits exists

A browser reaches four things: the microphone, the camera, the motion and magnetic sensors, and HTTP requests to hosts it is allowed to reach. Everything below sits outside that boundary, and no page in this suite can fake its way past it.

No RF spectrum analysis. A transmitting bug, a GSM audio device, an analogue 1.2GHz camera and a wifi jammer all announce themselves on radio. A browser has no receiver and no access to one. Finding those needs a spectrum analyser or an SDR with an antenna, on hardware outside the phone.

No non-linear junction detection. An NLJD floods a wall or a chair with RF and listens for the harmonics that semiconductor junctions return, which is how a professional sweep finds a device that is switched off and not transmitting. That needs a transmitter and a tuned receiver. A camera that is powered down is invisible to every screen here, apart from its lens.

No passive Bluetooth or wifi scanning. Web Bluetooth only reaches a device the user picks from a browser chooser and that advertises a service the page asked for, so it cannot enumerate what is nearby. There is no Web API for wifi scanning at all. A hidden camera sitting on the wifi never appears in this browser.

No sight of the network you are on. A page cannot list the devices on your LAN, read your router's client table, or see traffic. The camera probe reaches a host only when you type its address and our server can route to it, which means a public address, not the camera behind your NAT. The MAC lookup tells you the vendor of an address you already have.

A sensor screen reports its measurement, never an all clear. A quiet ultrasonic band means no sustained tone was present in that band, on this microphone, during those seconds. Microphones roll off steeply above 16kHz, a beacon can be directional or intermittent, and a device that records without transmitting emits nothing to hear.

Read the guide

What spyware actually is Detecting stalkerware When recording is legal