NETOUTPOST / RELEASE NOTES
Release notes
NetOutpost 0.1.45 · Build 47 · Developer preview
28 September 2026
New in 0.1.45
- Updated alerts and notifications. Includes the latest device activity, notification and management fixes.
- Simpler Mac installation. Open the disk image, drag NetOutpost to Applications and open it there.
- Native Mac updates. Use NetOutpost → Check for Updates to download and install new versions while keeping your settings and history.
- Improved Mac startup and removal. Background-service cleanup completes before the app is removed. Failed removal keeps the app in place, and saved settings and evidence are preserved.
- Standard-port access fixes. The helper correctly verifies signed monitoring services and distinguishes identity errors from background approval or startup problems.
- Clearer management. Updated Explore empty states, Private MAC labels and port-setup guidance make status easier to understand.
- Linux setup included. Portable downloads extract into a named folder with a first-run script and guides for remote access, background startup and privileged ports.
- Developer preview for Mac and Linux. Fresh Apple Silicon, Intel Mac, Linux ARM64 and Linux x86-64 builds. Both Mac apps are Developer ID signed, Apple notarized and stapled.
Available in this preview
- A native macOS window, a Linux dashboard launcher and independent background monitoring.
- Persistent device discovery, custom and background scans, external perimeter scans, open-service summaries, IP history and observed OS hints.
- Readable alerts, inline technical evidence, device-linked investigations, review status, notes and exports.
- Twenty-nine bundled WebAssembly decoys with configurable endpoints, protocol-aware evidence and isolated session processing.
- Desktop notifications plus optional email, HTTPS webhooks, Pushover, Telegram, Discord and Slack notifications.
- Signed application updates and a signed module repository for all 29 decoys.
Module security
Every bundled decoy runs as a WebAssembly module in a separate restricted worker. Guest capabilities exclude filesystem access, outbound connections, process execution and application secrets. Operating-system policies add a second isolation layer. Memory, time, traffic and evidence limits bound each session.
The main service owns listeners and persistence. It validates module observations, applies capture settings and creates alerts. Explore the security model ↗
Platform availability
- macOS Apple Silicon: signed and notarized app ZIP; macOS 13+.
- macOS Intel: signed and notarized app ZIP; macOS 13+.
- Linux x86-64 and ARM64: Debian packages and portable archives.
- Windows: coming soon.
Scope
NetOutpost observes interactions directed at decoys and discovers services on networks you approve. It complements existing firewall, endpoint and network-security controls. An alert records an observation and provides evidence for investigation.
Download integrity
Each downloadable artifact is matched to the release’s SHA-256 checksums. Mac apps are Developer ID signed, Apple notarized and stapled. Application and module update metadata are cryptographically signed.