Plug in. Scan everything. Go remote.
The Blacksight Scout is a compact recon stick that enumerates every WiFi network, Bluetooth device, client, and probe request in range. Add a USB 4G* dongle for fully remote operation -- plug it in and walk away. Kill switch and remote self-destruct included.
Complete wireless intelligence.
The Scout passively monitors all WiFi and Bluetooth activity in range and reports everything to the free dashboard.
Network Enumeration
Discover every WiFi network in range -- SSIDs, channels, encryption types, signal strength, and hidden networks.
Client Tracking
Track associated and unassociated clients. See which devices connect to which networks, and when.
Probe Request Capture
Capture probe requests to see what networks devices are looking for -- even when they're not connected.
Remote via 4G
Add a USB 4G dongle for fully remote operation. The Scout phones home over cellular and streams results to the dashboard.
Bluetooth Discovery
Enumerate Bluetooth and BLE devices in range. Track device names, types, signal strength, and manufacturer data.
Remote Self-Destruct
Wipe all data remotely via the dashboard or relay command. Cryptographically erases scan data, keys, and logs. Resets to clean image.
Offline Mode & Data Export
No 4G dongle required. All findings are stored locally on the device. Return after a few days, connect directly, and download everything. Export in standard formats for your toolchain.
Free Dashboard
All scan results stream to the same free dashboard as the Phantom. Manage your entire fleet from one place.
Deploy scenarios.
Pre-engagement recon
Deploy Scouts at target locations days before the engagement. Build a complete picture of the wireless landscape before you even start.
Physical security assessment
Leave a Scout in a lobby, conference room, or parking lot. See who's connecting to what, and what they're looking for.
Continuous monitoring
Deploy multiple Scouts across a client's locations for ongoing wireless security monitoring. All results in one dashboard.
How it connects.
The Scout phones home over a USB 4G dongle -- never through the target network. All scan data is end-to-end encrypted before it leaves the device. The Blacksight Relay forwards encrypted blobs to your Blacksight Connect app or web dashboard. The relay cannot decrypt anything -- it's zero-knowledge by design.
The relay is optional. You can keep all findings stored locally on the device -- no 4G dongle needed. Come back after a few days, connect directly to the Scout, and download all captured scan results, probe requests, and network maps. Whether you use the relay or retrieve data physically, we or anybody else can never see the plain data.
How the Relay WorksDevice encrypts locally
All scan results and recon data encrypted on the Scout before transmission.
Relay forwards blindly
The relay matches your device to your client and passes encrypted blobs. No storage, no decryption.
You decrypt locally
Your Blacksight Connect app or dashboard decrypts everything on your machine. Keys never leave your device.
Or retrieve physically
Skip the relay entirely. All findings stay on the device. Return to the site, connect directly, and download everything.
Hardware specs.
Frequently Asked Questions
What is the difference between the Scout and the Phantom?
The Scout is a passive wireless sensor for reconnaissance only -- it scans WiFi and Bluetooth without transmitting. The Phantom is a full offensive platform with five active attack modes. Deploy Scouts first to map the target, then use the intelligence to plan your Phantom deployment.
How long does the Scout run on battery power?
The Scout draws under 10 watts. On a standard USB battery pack, it runs 8 to 12 hours depending on capacity. Plugged into a wall outlet, it runs indefinitely.
Does the Scout need a SIM card?
Only if you want remote access. The Scout uses an external USB 4G dongle (not included) for cellular connectivity. Without the dongle, the Scout stores everything locally and you retrieve the data when you physically collect the device.
Is the Scout detectable?
The Scout operates in WiFi monitor mode and does not transmit on WiFi -- no deauths, no rogue APs, no active probing. It only listens to frames and advertisements that devices are already broadcasting. It leaves no RF fingerprint.
What data does the Scout capture?
WiFi: SSIDs, BSSIDs, channels, encryption types, signal strength, hidden networks, and client associations. Probe requests from unconnected devices. Bluetooth: device names, MAC addresses, device classes, service UUIDs, and BLE advertisement data.
Can I use multiple Scouts together?
Yes. Data from multiple Scouts merges into a single view in the dashboard. Deploy them at different locations around a target to get signal strength from multiple vantage points and triangulate the physical location of access points.
Start scanning.
Free dashboard and relay included. Plug in and go.
* USB 4G dongle with SIM card and data plan required, not included.