Awareness for
Your Environment.
Symvek Watchpoint is a desktop perception agent. It continuously notices nearby surveillance trackers, unfamiliar devices on your network, and drone signatures around you. Runs on Linux and macOS from the command line. Windows is planned and not shipped. Every signal stays on your machine.
Why This Exists
Modern surveillance is layered. Browser fingerprints. Wi-Fi probes. Bluetooth trackers tucked into car seats. Drones circling neighbourhoods. Cameras on every corner. Each layer has a tool that watches it. Nothing watches all of them at once.
Watchpoint is the desktop layer. It runs in the background, learns your normal environment over the first week, then surfaces what changed. A tracker followed you across three coffee shops? You'll know. A new device joined your home network at 2 AM? You'll know. A drone-vendor MAC broadcasting from the parking lot? You'll know.
Every signal stays on your machine. No telemetry. No account required to scan. Buy a license, install, run. Symvek sells software, not user data. By architecture, there is no user data to sell.
What Watchpoint Monitors
Six perception layers. One unified verdict. Continuous, not on-demand.
1. BLE tracker awareness
Background scan for AirTag, Tile, Chipolo, Pebblebee, SmartTag, and unknown beacons. Persistent unknown-MAC tracking with travel-mode trip log. Detection draws on the same peer-reviewed open-source clustering approach used by AirGuard.
2. Network baseline diff
Watchpoint learns your home and office baseline over the first week, then alerts on new devices joining your LAN, evil-twin Wi-Fi candidates, exposed camera admin ports, and IoT services that appeared overnight.
3. Drone vendor signatures
Passive Wi-Fi scan for drone-manufacturer MAC address blocks, logged with timestamp and signal strength. The vendor catalogue is being built now, starting with DJI, Parrot, Skydio and Autel. Linux and Windows, with Mac via an SDR add-on.
4. Sentinel surveillance overlay
When you grant location, Watchpoint surfaces fixed surveillance camera density within 500 m of your current address. Drawn from the 514,500+ record Sentinel public-records dataset.
5. SDR add-on (Bring-Your-Own)
Plug in an RTL-SDR or HackRF and Watchpoint extends to drone control links (ELRS, Crossfire), LoRa telemetry, and Remote ID broadcasts. Works on every platform. Same software, no additional license cost.
6. Daily perception digest
A one-page summary of what was around you today. Trackers seen, network changes, drone signatures, camera-density rating. The "what changed" view. Optional weekly email digest for accountability.
Platform Coverage, Honestly
macOS retired the system-level Wi-Fi monitor-mode access in 2024. We're not pretending otherwise. Here's exactly what works on each platform.
| Capability | macOS | Linux | Windows |
|---|---|---|---|
| BLE tracker awareness | ✓ | ✓ | ✓ |
| Network baseline diff | ✓ | ✓ | ✓ |
| Sentinel camera overlay | ✓ | ✓ | ✓ |
| Drone vendor MAC scan (Wi-Fi) | SDR only | ✓ | ✓ |
| SDR drone detection (BYOSDR) | ✓ | ✓ | ✓ |
If drone-vendor Wi-Fi detection matters to you and you're on Mac, the SDR add-on covers the same use case via an RTL-SDR ($30) or HackRF ($300). Receive-only SDR is unregulated for personal use; Watchpoint never transmits.
How It's Built
The kind of detail you'd want to know before installing a security tool from a stranger.
A command-line tool, not an app
Watchpoint is a small Python program you install and run. No Electron, no bundled browser, no background tray icon. Three dependencies, and you can read all of them.
A local log that never leaves your machine
The perception history is a plain-text event log on your own disk. We do not have a server-side copy. We could not deliver one if subpoenaed.
Tamper-evident, and you can check it offline
Every event is signed as it is written. Run one command against the log and a public key to confirm nothing was altered or removed, with no network connection and no need to trust us.
License keys, not DRM
Activate once, use forever. Cancel any time and the binary keeps working: you just stop receiving new tracker signatures and Sentinel data refreshes.
Preview Release
Version 0.0.9, free. Four scanners, a command line, no graphical interface. Python 3.10 or newer, on Linux or macOS. Windows is planned and not shipped.
Watchpoint runs entirely on your machine. Every signal stays there, and you don't have to take our word for it: the verifier below makes no network calls of any kind, so you can run it on a machine with the cable pulled out.
Download all three into the same folder. These commands make a private Python environment, check the download, then install it:
python3 -m venv watchpoint-env
./watchpoint-env/bin/pip install --upgrade pip cryptography
./watchpoint-env/bin/python verify-symvek-release.py symvek_watchpoint-0.0.9-py3-none-any.whl
./watchpoint-env/bin/pip install symvek_watchpoint-0.0.9-py3-none-any.whl
./watchpoint-env/bin/watchpoint --versionA genuine download prints OK: … signed by Symvek (Ed25519 + ML-DSA-65). If it prints UNCHECKED, the classical signature passed but the post-quantum check could not run, usually because the cryptography library is too old. Run the commands above in order and it will complete. If it prints FAILED, stop and email us. The signature is hybrid: a classical one and a post-quantum one, and both have to pass.
Most Linux distributions and Homebrew no longer let you install packages into the system Python, which is why the commands use a separate environment. On Ubuntu or Debian, if the first command fails, install python3-venv and run it again. Everything lives in the watchpoint-env folder, so deleting that folder removes Watchpoint.
What it does not do yet
- No graphical interface. Everything runs from a terminal.
- No Windows build.
- Four scanners, not a complete picture of your environment.
- It reports what it observes. It does not act on anything it finds.
Questions, or a verification that failed: hello@symvek.com