Distributed Network Observability Platform

Your network,
in focus.

Deploy lightweight agents across your infrastructure and gain microsecond-accurate visibility into every hop, every path, and every application layer — from office edge to multi-cloud.

0+
Test Types
0μs
Jitter Precision
0%
Rust-Powered
Self-Hostable
Full Data Sovereignty

Built with battle-tested technology

Platform

Everything you need to monitor any network

From a single office to a global multi-cloud deployment — Signalscope gives you complete visibility at every layer.

Distributed Agents

Lightweight Rust agents deploy in seconds via a single curl command. They run autonomously, survive reboots, self-update with cryptographic signature verification, and relay telemetry through mesh peers when connectivity is restricted.

20+ Test Types

ICMP ping, HTTP/S timings, DNS validation, TCP connectivity, SSL expiry audits, MTR path analysis, speed tests, database health checks (MySQL/PostgreSQL), gRPC, SMTP, Redis, and more — all from a unified catalog.

ScopeRTC — WebRTC Quality

Simulate real Voice, Video, and Data Channel traffic between agents. Measure One-Way Delay, jitter, and packet loss with microsecond precision, and compute live MOS scores using the ITU-T G.107 E-model.

Real-Time Dashboards

WASM-powered management console with live WebSocket telemetry, per-org configurable widget layouts, time-range pickers, alert creation from any result, and global interactive network maps via Leaflet.

Multi-Tenant & RBAC

Full database-per-tenant isolation for resellers and sub-organizations. Granular RBAC scoped to specific locations, with impersonation, role groups, and user-level overrides for enterprise compliance.

Security-First Design

Ed25519 agent binary verification, rotating 90-day JWTs, HMAC-SHA256 mesh authentication, TOTP 2FA, rate-limited endpoints via Redis, AES-256-GCM encrypted state files, and hardened cookie handling.

Global Network Map

Interactive Leaflet map visualizing all agent locations with geocoded coordinates, GeoIP enrichment (MaxMind + iptoasn), MTR hop tracing, and ASN flow diagrams for deep path intelligence.

Mesh Testing

Agents form an automatic SSMP mesh fabric and measure east-west performance between every pair. Multi-IP intelligence selects the best path (LAN/VPN > CGNAT > Public), and isolated agents relay through peers.

Network Discovery

Agents perform continuous network discovery including port scanning, ARP sweeps, IP range surveys, and WiFi environment audits — building a live inventory of every device on your segments.

Workflow

Up and running in minutes

No complex configuration, no agents to babysit. Signalscope handles everything from provisioning to real-time alerting.

1

Create an Organization

Sign up and define your tenant. Invite team members with fine-grained RBAC roles in seconds.

2

Deploy Agents

Generate a registration token and run a single curl command on any Linux, macOS, or ARM machine.

3

Configure Tests

Use the dynamic Test Wizard to schedule ping, HTTP, DNS, WebRTC, or speed tests from your catalog.

4

Monitor & Alert

Live dashboards stream results via WebSocket. Set threshold alerts and get notified before users notice.

Capabilities

Complete monitoring coverage

Every test type built-in and catalog-driven — add new capabilities without touching the frontend.

ICMP PingLatency, jitter & reachability
HTTP/SFull timing breakdown, status validation
DNS HealthResolution time & record validation
TCP ConnectivityPort checks & banner grabbing
SSL CertificatesExpiry dates, chain & protocol audits
MTR / TracerouteMulti-cycle hop stats & path analysis
Speed TestTCP/UDP/HTTP bandwidth benchmarks
MySQL / PostgreSQLReal-time DB connectivity & latency
Redis LatencyCommand round-trip timing
SMTPSTARTTLS verification & auth
gRPCHealth checks per-service
API TransactionsMulti-step HTTP workflows with variable capture
SSMP Full MeshAutomatic agent-to-agent discovery & testing
Mesh RelayTunnel telemetry through connected peers
Multi-IP IntelligenceLAN / VPN / CGNAT / Public path selection
HMAC AuthenticationOrg-wide mesh key, mutual auth per session
Agent Speed Test (QUIC)Agent-to-agent bandwidth via QUIC transport
East-West VisibilityDistributed agents measure inter-location paths
Port ScanningTCP/UDP sweep across IP ranges
ARP DiscoveryLayer-2 device enumeration & MAC resolution
IP SweepsLive host discovery across subnets
WiFi SurveyingSSID enumeration, security posture & risk scoring
Location Risk Score0–100 score from WiFi security, agent health & coverage
Collections EngineScheduled or on-demand discovery jobs
Voice SimulationRealistic Opus audio traffic profiles
Video SimulationVP8/H.264 video traffic emulation
MOS ScoringITU-T G.107 E-model, real-time calculation
One-Way DelayMicrosecond-accurate OWD per direction
Capacity PlanningRamp-up tests to find throughput ceilings
Asymmetric Path DetectionUpload vs download delta analysis
Path CorrelationWebRTC jitter vs ICMP RTT dual-axis charts
Multi-Target CollectorsSingle agent tests against multiple collectors
Dynamic Test WizardCatalog-driven, zero frontend changes for new types
Alert EngineThreshold rules with notification channels
Tagging & FavoritesLabel resources and pin critical segments
Audit LoggingFull CUD audit trail per organization
TOTP 2FAPer-user two-factor authentication
Self-HostableDeploy on-prem or any cloud for full data sovereignty
Agent Self-UpdateEd25519-signed binary delivery, zero-downtime
WebAgent / Guest ModeBrowser-based diagnostics with one-click access
ScopeRTC

WebRTC quality testing
at microsecond resolution

Real-time communications demand real-time insight. ScopeRTC goes beyond synthetic ping to simulate actual Voice and Video traffic, measuring the metrics that determine user experience.

  • ITU-T G.107 MOS Scoring Live Mean Opinion Score calculated from jitter, loss, and delay — the industry standard for audio quality perception.
  • Bidirectional Asymmetry Detection Separate inbound and outbound metrics reveal asymmetric network conditions that symmetric tests completely miss.
  • Capacity Planning Ramp-Up Automatically escalate concurrent sessions to find the maximum stable call count before quality degrades.
Avg RTT (ms)
Active Links
Avg LQS
SSMP Mesh Fabric

East-west visibility,
automatically.

Traditional monitoring only watches the edge. SSMP creates a full-mesh fabric between every agent pair in your organization — measuring real path performance between your own infrastructure endpoints, continuously, without manual configuration.

  • Automatic Full-Mesh Discovery Every agent connects to every peer automatically on registration. New sites are measured within one heartbeat cycle — zero manual wiring.
  • Bidirectional Independent Measurement Initiator and listener report independently. Asymmetric path degradation is detected immediately — even when only one direction is affected.
  • Smart Path Selection & Mesh Relay LAN and VPN paths are always preferred. Agents behind strict firewalls route telemetry through mesh peers — no agent is ever unreachable.
  • Link Quality Score A composite 0–100 LQS per link accounts for RTT, jitter, and packet loss. Trends over time reveal degradation before it becomes an incident.
TCP Kernel Stats HMAC-SHA256 Auth Sub-ms Jitter QUIC Speed Tests WebRTC Overlay GeoIP Enrichment
Architecture

Built for scale from day one

A purpose-built Rust stack with ClickHouse for time-series analytics, Redis for real-time coordination, and a WASM frontend — no compromises.

WASM UI

Yew / Rust

Server

Axum / Tokio

Agents

Edge Workers

ClickHouse

Time-Series DB

Redis

Pub/Sub & Cache

REST / WebSocket SSMP Mesh Protocol Redis Streams (Write-Behind)

Write-Behind Ingestion

Agents push results into Redis Streams for instant acknowledgement. A dedicated ingest worker bulk-inserts to ClickHouse — absorbing traffic spikes without dropping a single metric.

Database-Per-Tenant

Every organization gets its own isolated ClickHouse database. No shared tables, no cross-tenant leakage. Migrations run per-tenant independently, enabling zero-downtime schema evolution at scale.

Distributed Scheduler

Redis-backed distributed locking coordinates test dispatch and alert evaluation across multiple server instances — no single point of failure, no duplicate test runs.

Security

Security at every layer

Built with a security-first philosophy. Every component — from binary delivery to inter-agent communication — is hardened by design.

Ed25519 Binary Signing

Agent self-updates are verified using Minisign Ed25519 signatures. The public key is compiled into the binary — no update is applied without cryptographic proof of authenticity.

Rotating JWT Tokens

Agent tokens rotate every 90 days with Redis-backed revocation lists. User session tokens have a 24-hour TTL. Compromised tokens are invalidated in real-time.

AES-256-GCM Encryption

Agent state files and sensitive values (mesh keys, TOTP secrets) are encrypted at rest using AES-256-GCM. A live migration re-encrypts plaintext files on first access.

Redis-Backed Rate Limiting

Per-IP and global rate limits protect all sensitive endpoints — login, registration, and guest result submission — against brute-force and denial-of-service attacks.

Granular RBAC

Capabilities scoped to organizations or individual locations. Group-based assignments with per-user overrides. Super Admin actions are isolated to the root system organization.

TOTP Multi-Factor Auth

Per-user TOTP 2FA with SHA-256 HMAC. TOTP secrets encrypted at rest. Configurable grace windows and recovery flow without exposing plaintext seeds.

Ready to put your network
in focus?

Deploy your first agent in under two minutes. No credit card required.