Freedom251 › Network Packet Analyzer Software
PcapAI
What PcapAI is
PcapAI analyzes PCAP and PCAPNG network captures and generates security reports. Its machine-learning models assess packet context and map findings to MITRE ATT&CK techniques. Downloadable PDFs include risk scores, findings, packet evidence, and remediation steps. The platform detects plaintext credentials, NTLM hashes, Kerberos tickets, and session tokens, then masks discovered credentials in reports. It also reports retransmissions, per-flow latency, TCP Zero Window events, and ARP conflicts. The homepage offers free uploads without an account; paid options include one-time reports, credit packs, and monthly or annual plans. The $9.00 USD one-time Single Report allows one upload and analysis, with a 25MB maximum and one PDF. Advanced plans include REST API access, and the maker describes sending findings to Splunk, Elastic SIEM, or Microsoft Sentinel. An open-source MCP Server supports local analysis with AI assistants, with packet data staying on the device according to the maker. Compressed archives are unsupported, and file-size limits depend on the plan.
Who it suits
The maker identifies SecOps and SOC analysts, DevOps and NetOps engineers, security consultants, and pentesters as audiences. It may also suit teams that want local capture analysis or API access on an Advanced plan.
What it does well
- Analyzes PCAP and PCAPNG captures.
- Reports map findings to MITRE ATT&CK techniques.
- PDFs include packet evidence and remediation steps.
- Free upload is available without an account.
- Local MCP Server keeps packet data on-device, according to the maker.
What to know first
- Compressed archives are unsupported.
- File-size limits vary by plan.
- Single Report permits one upload and analysis.
- Live capture is not available.
Limits
The homepage invites users to upload any PCAP for free without an account; file-size limits depend on the plan and compressed archives are unsupported. The $9.00 USD Single Report plan allows one 25MB upload, one AI analysis, and one PDF report.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Starter yearly | yearly · 25MB max file · 60 reports/year | $114 a year |
| Starter (yearly) | $114 /year · Just $9.50/mo, billed annually · 25MB max size · 60 reports / year | $114 a year |
| Pro pack | one-time · 25MB max file · 30 uploads · 30 PDF reports · credits never expire | $135, paid once |
| Starter | monthly · 25MB max file · 5 reports/month | $19 a month |
| Pro (yearly) | $294 /year · Just $24.50/mo, billed annually · 50MB max size · 240 reports / year | $294 a year |
| Pro yearly | yearly · 50MB max file · 240 reports/year | $294 a year |
| Starter pack | one-time · 25MB max file · 5 uploads · 5 PDF reports · credits never expire | $35, paid once |
| Pro | monthly · 50MB max file · 20 reports/month | $49 a month |
The first 8 of 13 plans, as pcapai.com lists them, read 14 Oct 2026. The maker's own page has the final word. Every plan
Getting started
- Open the PcapAI website
- Upload a PCAP or PCAPNG file without an account, or choose a paid plan
- Select a plan matching the file size and report volume
- Run the analysis
- Download the generated PDF report
- For local analysis, use the open-source MCP Server with a supported AI assistant
Verdict
PcapAI combines security findings with packet evidence and network troubleshooting indicators in downloadable reports. The free upload option has no account requirement, while report limits and file-size caps depend on the paid plan selected.
Questions
What does PcapAI cost?
A free upload option is available. Paid choices include Single Report at $9, paid once, monthly and annual subscriptions, and one-time credit packs.
Is an account required for free use?
No. The homepage says users can upload any PCAP for free without an account.
Which capture formats are accepted?
PcapAI accepts PCAP and PCAPNG files. Compressed archives are unsupported.
Does PcapAI provide an API?
Yes. The Advanced plan includes REST API access, and findings can be sent to Splunk, Elastic SIEM, or Microsoft Sentinel.
Can analysis run locally?
Yes. An open-source MCP Server supports local PCAP analysis with AI assistants such as Claude Desktop, and the maker says packet data stays on the device.
Which operating systems are supported?
PcapAI lists Windows, macOS, and Linux, along with web, API, and self-hosted options.
Facts from PcapAI's own pages
- Analysis speed
- The about page says a full report is typically produced in under two minutes. · pcapai.com, 14 Oct 2026
- API authentication
- API requests require a Bearer token and API access is restricted to Advanced subscribers. · pcapai.com, 14 Oct 2026
- API modes
- Uploads can specify security, troubleshooting, compliance, forensic or shadow-it analysis modes. · pcapai.com, 14 Oct 2026
- Audience
- The maker identifies SecOps and SOC analysts, DevOps and NetOps engineers, and security consultants and pentesters as its primary audiences. · pcapai.com, 7 Oct 2026
- Credential exposure
- It searches captures for cleartext passwords, NTLM hashes, Kerberos tickets and session tokens, then masks discovered secrets in reports. · pcapai.com, 14 Oct 2026
- Credential masking
- Cleartext credentials and sensitive payloads are mathematically masked in generated reports rather than printed. · pcapai.com, 14 Oct 2026
- Credentials
- The product detects plaintext credentials, NTLM hashes, Kerberos tickets, and session tokens, and masks discovered credentials in reports. · pcapai.com, 7 Oct 2026
- Developer documentation
- Official developer documentation covers MCP setup, REST authentication, upload polling, report download and automation examples. · pcapai.com, 14 Oct 2026
- File limits
- PcapAI accepts PCAP and PCAPNG files; compressed archives are unsupported, and file-size limits depend on the plan. · pcapai.com, 7 Oct 2026
- Free use
- Users can upload a PCAP without an account and receive a free threat summary; the full forensic PDF costs $9. · pcapai.com, 14 Oct 2026
- GitHub macOS limitation
- The repository warns that its unsigned binary triggers macOS Gatekeeper and may require removing the quarantine attribute. · github.com, 14 Oct 2026
- GitHub prerequisites
- The repository lists Rust 1.75 or newer, an optional PcapAI API key and Claude Desktop or another MCP-compatible client as prerequisites. · github.com, 14 Oct 2026
- GitHub protocol
- The MCP server communicates using JSON-RPC 2.0 over standard input/output and uses reqwest with rustls plus Tokio. · github.com, 14 Oct 2026
- GitHub repository status
- The public pcap-ai/mcp-server repository shows one star, zero forks and five commits when crawled. · github.com, 14 Oct 2026
- GitHub size error
- The repository documents HTTP 413 errors when an uploaded capture exceeds the service limit. · github.com, 14 Oct 2026
- GitHub workflow
- The repository documents a flow that reads a local capture, uploads it to the REST API, polls completion and saves the generated PDF beside the capture. · github.com, 14 Oct 2026
- Integrations
- The maker describes use with SIEM systems, CI/CD pipelines, ticketing workflows and custom backend scripts. · pcapai.com, 14 Oct 2026
- Limit: capture scope
- The homepage says Wi-Fi monitor-mode, USB and Bluetooth captures are unsupported, and compressed archives are not accepted. · pcapai.com, 14 Oct 2026
- Limit: file size
- The free analyzer accepts files up to 20 MB; Starter allows 25 MB and Pro or Advanced allow 50 MB. · pcapai.com, 14 Oct 2026
- Limit: larger deployments
- Custom file-size limits, higher volumes and on-premise deployment require contacting sales. · pcapai.com, 14 Oct 2026
- Local analysis
- The maker offers an open-source MCP Server for local PCAP analysis with AI assistants such as Claude Desktop; it says packet data stays on the device. · pcapai.com, 7 Oct 2026
- MCP cloud dependency
- Although the MCP binary runs locally, it uploads the capture to PcapAI over TLS for server-side analysis and therefore does not operate offline. · pcapai.com, 14 Oct 2026
- MCP integration
- The MCP server lets AI clients such as Claude Desktop invoke PCAP analysis and MITRE mapping from a local file path. · pcapai.com, 14 Oct 2026
- MCP licence
- The MCP server is released as open-source Rust software under the MIT licence. · pcapai.com, 14 Oct 2026
Where PcapAI stands on Freedom251
- Network Packet Analyzer Software#4 of 32