iotaudit

Over time a home network fills up with cameras, plugs and doorbells, and most of us have only a vague idea where any of them send data. iotaudit is a free, open-source command-line tool for finding out. You install it with pip or pipx and run sudo iotaudit auto. According to the README, that command asks for consent, audits your own network and writes an HTML report. Each device gets an A to F grade and a one-line verdict.

The report covers who a device contacts and whether that traffic was TLS or plaintext. An optional nmap scan adds open ports, with risk notes for services such as telnet, RTSP and UPnP. There are extras if you want them, including PDF output, a grade summary for Home Assistant over MQTT and an MCP server. It needs Python 3.10 or later.

The project site also has short pages on what common devices typically send, covering IP cameras, a Tuya smart plug, a Philips Hue bridge and a Ring doorbell among others. It says these are based on public documentation and the tool's own device profiles, so they make handy reading even before you run anything.

The README is plain about what a result means. When the tool labels a destination, that's described as a pattern match, not proof of what was sent. It's also written for your own network, and the command asks for consent before it starts. And it's early software: the README gives the status as 0.1.21, and the GitHub repository was created on October 16, 2026.

iotaudit is free and MIT-licensed. The README says everything runs locally, with no account, no telemetry and no cloud. The maintainer is the GitHub user emirmrkaljevic. It runs with sudo because it captures network traffic, so it's worth reading the README and skimming the source before you give it that access. If you're comfortable in a terminal and curious about your smart home, set aside an evening and see what grades your devices get.