Security & authorized use

Wiretap is a protocol analysis toolkit for data you are authorized to study.

Out of scope

• No MITM or network tapping
• No authentication / encryption bypass helpers
• No remote exploit tooling
• No silent third-party capture

Capture helpers

wiretap capture, wiretap watch, and PCAP ingest / --follow only load operator-provided files, directories, or stdin. --follow tails a growing PCAP file on disk — it does not open network interfaces or require Npcap.

Privacy

• Offline by default
• No telemetry
• No LLM / cloud model API calls
• Captures are not uploaded by Wiretap

Reporting vulnerabilities

Prefer a GitHub security advisory when published. Placeholder contact: security@wiretap.local (maintainer: replace with a real address in SECURITY.md). Do not file public issues for undisclosed vulnerabilities.