One console for every risk that changes the moment you cross a border: untrusted networks, rogue hotspots, stalker trackers, hidden cameras, roaming bills, and device search at customs.
Travel protection score 6 controls off
0
Calculating…
Live threat telemetry 0 events
Trackers blocked
0
this trip
Data saved
0
MB vs roaming cap
Roaming spend
€0
projected €0 by trip end
Hardened controls
0/12
active protections
Destination threat intel
Network traffic — 60s rolling
■ allowed traffic■ blocked exfiltration attempts
Travel-exclusive defences
Border Crossing ModeUNIQUE
Pre-flight wizard that locks the vault, hides financial apps, disables biometrics and purges cached tokens before a device search.
Anti-stalker Tracker DetectUNIQUE
Correlates BLE sightings across locations and time to flag a tracker that is following you, not just nearby.
Evil-twin & portal sandboxUNIQUE
Catches cloned airport SSIDs and renders captive portals in an isolated container that never sees your keystrokes.
Impossible-travel lockUNIQUE
Geofences logins: any access from a country you aren't in is killed instantly, no matter how real the session looks.
Charge-only USB modeUNIQUE
Blocks the data pins on airport charging kiosks so juice-jacking hardware sees a battery, never a filesystem.
Split tunnel by geographyUNIQUE
Banking and government apps always exit through your home region, so they never trip a fraud block while you travel.
Network Shield WI-FI / USB / ROGUE AP
Public Wi-Fi is the single biggest attack surface you meet abroad. Aegis fingerprints every access point, detects evil twins, sandboxes captive portals, and auto-arms the tunnel the moment trust drops.
Current connection
SSID—
BSSID—
Encryption—
Trust verdict—
Auto-arm tunnel on untrusted nets
VPN + firewall + DNS-over-HTTPS engage before any packet leaves the device.
Captive portal sandboxUNIQUE
Renders hotel/airport login pages in isolation. Never types your real credentials into a portal.
Charge-only USB modeUNIQUE
Blocks data pins on public charging ports (juice-jacking).
Rogue-AP / evil-twin detector
Flags duplicated SSIDs with mismatched BSSID vendor fingerprints.
Nearby access points —
Connection diagnostics
Why this matters abroad
Evil twin. An attacker clones the café SSID you already trust, and your phone auto-joins the stronger signal. Everything you type is captured.
Captive portal harvest. Fake "free Wi-Fi" portals ask for an email, a passport number, or a card "to verify". They are credential farms.
SSL stripping. Hotel networks downgrade you to plain HTTP and inject pages into your traffic.
Juice jacking. Public USB ports are computers. Charging is fine; sync is not.
Tunnel / VPN ENCRYPTED EXIT
Geo-flexible tunnelling built for travellers: obfuscation for restrictive networks, per-app geography splitting so your bank still sees you at home, and a kill switch that survives roaming re-registration.
DISCONNECTED
PROTOCOL WireGuard
SESSION 00:00
Exit nodes tap to select
Node
Role
Load
RTT
Home-region nodes keep banking and government portals from flagging fraud. Low-surveillance nodes are for journalism, activism and anything a local ISP shouldn't log.
Tunnel hardening
Kill switch
All traffic stops dead if the tunnel drops mid-handover between cell towers.
Obfuscated / stealth modeUNIQUE
Disguises the tunnel as ordinary HTTPS. For networks that throttle or block VPNs.
Split tunnel by geographyUNIQUE
Banking, tax and ID apps always exit via your home country. Everything else uses the nearest fast node.
DNS-over-HTTPS + DNSSEC
Stops hotel DNS servers from hijacking lookups or logging every domain you visit.
Multi-hop for hostile regions
Two nodes: entry sees your IP, exit sees the destination. Neither sees both.
Privacy Shield ANTI-TRACK / ANTI-LEAK
Travel devices leak identity in ways home networks never expose: your phone's Bluetooth name, the hotel TV discovering you, background apps uploading location to ad networks on a foreign SIM.
Trackers blocked today
0
ads, analytics, session replay
Permission abuse
0
background camera/mic attempts
Fingerprint entropy
98%
randomised per browsing session
Leak canaries
7
identity trails monitored
Controls
Anti-tracker web filter
Strips trackers and session-replay recorders from every page, including captive portals.
Camera & microphone guard
Hard-blocks any background app from lens or mic, with a one-tap kill if one tries.
Bluetooth name randomiserUNIQUE
"Jordan's iPhone 15 Pro" in a hotel lobby is a confession. Broadcasts a rotating anonymous ID instead.
Casting / DIAL isolationUNIQUE
Stops hotel smart TVs and neighbours from discovering your device for screen casting or pairing probes.
Location permission leashUNIQUE
Precise GPS is fuzzed to a 5 km grid on foreign SIMs so ad networks can't map your hotel.
Screenshot & shoulder-surf shield
Blanks sensitive fields when a screen recorder or unknown display is detected.
Permission audit —
Identity leak canaries
Scam Guard QR · LINKS · SMS · ATM
Every traveller scam in 2026 arrives as a QR code, a text message, or a "helpful" local. Paste it, scan it, or read it here before you act on it.
QR / link analyser
SMS / message inspector
Physical-world defences
ATM / card skimmer check
Before inserting a card: tug the reader bezel, cover the keypad, refuse "helpful" strangers, and prefer terminals inside a bank branch. Aegis maps reported skimmer clusters per city from its community feed.
Taxi & meter tamper
Photograph the licence plate and the meter at the start. Fake meters and "broken card readers" are the two most common transport overcharges worldwide.
Fake police / "fine on the spot"
No legitimate officer takes cash for a fine. Ask to walk to a station. Aegis keeps a verified list of tourist-police extortion hotspots for your destination.
Rental-car Bluetooth leftovers
Wipe paired phones, calls and nav history before you return the car, and re-pair only after you confirm the previous user's session is gone. Aegis prompts you at drop-off.
Known patterns being watched
Verdict engine — how it scores
Domain age & registrar reputation · homoglyph / lookalike distance to real brands · TLS issuer and age · redirect chain length & hop countries · blocklist match · whether the page ever asks for a card, passport, or one-time code · URL shortener nesting · QR sticker-overlay detection (physical codes taped over official ones).
On-device scoring only. The checker never fetches a suspicious page from your own IP — it resolves through Aegis cloud nodes so your address is never burned.
Border Crossing Mode UNIQUE · PRE-FLIGHT
At a border, a device is legally searchable in many countries. This wizard removes what can be misread, hides what is private, and leaves a device that looks and behaves perfectly ordinary.
Hardening wizard
What Border Mode changes
⌘
Vault re-keyed to passphrase only
Biometrics are legally compellable in some jurisdictions; a passphrase is knowledge, not identity.
◍
Financial & messaging apps hidden
Icon, notification banner and widget surfaces are removed from the home screen.
▤
Cached tokens and thumbnails purged
Encrypted containers, cloud caches, recently-deleted albums, clipboard history.
◎
Legal / medical / journalistic material protected
Moved into a duress-passphrase container that opens to an innocuous decoy workspace.
Insurance, prescriptions and emergency contacts stay reachable without the vault passphrase.
Border Mode never destroys data and never lies about what the device contains beyond encryption you already own. Everything is reversible in one tap the moment you clear immigration.
Duress passphrase
A second passphrase, typed under pressure, opens a clean decoy profile and silently wipes the protected container's keys. Configure it here and rehearse it before you fly.
Country legality snapshot
Indicative only, not legal advice. Rules about compelled device unlocking change frequently — verify current requirements with your embassy before travelling.
Anti-Stalker Tracker Detect UNIQUE · BLE
Airtags and clones are dropped into luggage and rental cars. Aegis doesn't just list nearby devices — it correlates sightings across locations and time to decide whether something is following you specifically.
Passive radar
Radar idle · BLE scanning off
Correlated sightings 4 devices
"Follows you" requires three or more co-located sightings across distinct venues with a stable rotating-MAC fingerprint pattern. That is what separates a stranger's earbuds from a tracker in your bag.
If a tracker is following you
1. Don't confront it
Never return alone to a place you were followed from. Move to a public, camera-covered space first.
2. Photograph and bag it
Seal it in something foil-lined so it stops reporting, and photograph the serial. That's the evidence trail.
3. Report locally then nationally
Local police report number, then your embassy. Stalking by device is a criminal offence in a growing list of countries.
Spy Lens UNIQUE · HIDDEN CAMERAS
Vacation rentals account for the overwhelming majority of reported hidden-camera cases. Two checks cover it: what's on the local network, and what reflects light in the room.
Local subnet device sweep
Optical check — the reliable one
1. Kill the lights and shut the curtains. Cameras need light. 2. Open your phone's front camera (not the rear — many rear modules filter IR) and sweep the room slowly. 3. Any lens shows as a small bright dot. Check the obvious hosts first:
Smoke detectors · alarm sensors
Air vents · AC units
Bedside clocks · speakers
Mirror edges · picture frames
Router LEDs · USB chargers
Bathroom vents · shower heads
Roaming Data Guard COST · SIM · eSIM
The bill is a security problem too: background sync on a foreign network drains a roaming allowance, triggers "insufficient data" phishing texts from fake carriers, and reveals your location to ad networks.
Allowance —
—
MB left
Plan—
Used—
Daily burn (3-day avg)—
Days remaining—
Hard-stop at 90% of allowance
Everything except maps, messaging and emergency calls goes offline. No surprise bill, ever.
Block background data in roaming
All apps fall back to Wi-Fi only while on a foreign cell network.
Per-app roaming usage
Aegis labels which apps phone home to ad networks on a foreign SIM — those are the ones worth leashing to Wi-Fi-only even on an unlimited plan.
SIM & eSIM integrity
Carrier-phishing shieldUNIQUE
Fake "you've used 80% of your data, top up here" texts are the most-clicked scam aimed at travellers because the carrier name matches your roaming partner. Aegis verifies the sender against the real carrier shortcode and blocks the link.
Data-proof essentials cached before you fly: offline maps, phrasebook, boarding passes, insurance PDFs, embassy addresses, and your emergency card.
Document Vault AES-256-GCM · OFFLINE
Passports, visas, insurance certificates, prescriptions and vaccination records — encrypted, available with no signal, and re-keyed for border crossing.
Vault contents —
Vault controls
Require passphrase at borders
Biometrics stay off until you clear immigration, so nothing is unlocked by a finger you didn't choose to give.
Offline-only copies
Documents never leave the device, never sync to a cloud account that could be disclosed.
Wipe after N failed unlocks
10 attempts, then the keys are destroyed. Recovery phrase is the only way back.
Emergency break-glass accessUNIQUE
A sealed subset (insurance, allergies, ICE contacts) stays readable by hospital staff with no passphrase.
CipherAES-256-GCM
Key derivationArgon2id · 256 MB
StorageDevice enclave only
Recoveryphrase not set
Emergency & SOS OFFLINE-CAPABLE
Works with no data, no roaming agreement and no battery-hungry apps. Your card, your contacts, local emergency numbers and your embassy — all readable from the lock screen.
Panic & SOS
Emergency numbers —
Numbers shown are the widely published national emergency lines for these countries. They can change, and some services are answered in the local language only — store the ones you need offline and verify them with your accommodation on arrival.
Emergency card locked-screen visible
✚
Travel emergency card
Name · blood type · allergies · conditions · medications · insurer policy · ICE contacts · embassy line