ContextCleaner: see every entry in the Windows 11 right-click menu, and which app added it — on the Microsoft Store.
Guided workflow variation

The ticket says "port issue."The answer is a PID and a path.

Port Detective collapses netstat → tasklist → taskkill into one screen your whole team can reason about: search the port, read the real owner, end it safely. Microsoft Store install, no telemetry.

Port Detective replaces netstat → tasklist → taskkill with one screen: search the port, confirm the owner, end it safely. Microsoft Store install IT can approve.

Pay once. Own it forever.

One-time purchase on the Microsoft Store · No subscription · Instant install

Get it from Microsoft

Buy through the Microsoft Store—instant install, automatic updates, and a Microsoft receipt for easy expensing. No account needed on our site, and no subscription on Store purchases.

Full PortDetective overview
One-time purchase No telemetry Local-first

windows · native Rust · free + one-time Pro · no telemetry

If this sounds like your week

The ticket says "port issue." The truth is a PID and a path.

A user's app won't start. Someone pastes a wall of `netstat` output into the ticket and escalates. Now it's your problem, and you still don't know which process on their machine is holding the port — just that something is.

Where tooling usually breaks

Three consoles and a 2011 wiki page is not a support workflow.

`netstat`, then `tasklist` to translate the PID, then `taskkill` — repeated on every ticket, often over a remote session, often on camera. It's slow, it's error-prone, and PID recycling means the number in the ticket may already point at something else by the time you act on it.

Where PortDetective lands

Identify, confirm, resolve — one screen the whole team can reason about.

Port Detective collapses the netstat-to-taskkill loop into a single view: search the port, read the real process name and path, end it safely with Process Token verification so you never kill a recycled PID. It installs from the Microsoft Store — an acquisition path IT can actually approve — and Pro's exportable history gives you an audit trail per machine.

Pay once. Own it forever.

One-time purchase on the Microsoft Store · No subscription · Instant install

Get it from Microsoft

Buy through the Microsoft Store—instant install, automatic updates, and a Microsoft receipt for easy expensing. No account needed on our site, and no subscription on Store purchases.

Compare free vs Port Detective Pro

windows · native Rust · free + one-time Pro · no telemetry

What you get

Feature highlights

Free

live listening-port visibility with process name, PID, and executable path, instant port lookup, and 5 free kills to try safe token-guarded termination.

Pro — Unlimited safe kills

end any rogue process in one click, guarded by a secure Process Token so you never terminate a recycled PID.

Pro — Port Guard

a native system-tray daemon watches your critical ports every 250 ms and can auto-kill an intruder and relaunch the right owner.

Pro — Full stack visibility

every TCP and UDP connection across IPv4 and IPv6, smooth even with thousands of connections.

Pro — Remote & Docker aware

scan VMs, Docker bridges, and network servers, and map host ports back to the container and image that published them.

Pro — Power workflow

Ctrl+K command palette, deep parent/child process inspection, connection-history timeline with CSV/JSON export, and per-port notes with backup/restore.

Both editions

native Rust, typically under 50 MB RAM, signed, no telemetry, no account wall — one-time Pro purchase on the Microsoft Store, no subscription.

Especially when

  • Find what process is using a port on Windows before you kill the wrong service
  • Resolve EADDRINUSE and listening-port conflicts without juggling netstat, tasklist, Task Manager, and Resource Monitor
  • Keep critical local ports protected from rogue processes with an always-on watchdog (Pro)
  • Map Docker host ports to containers and scan remote hosts during developer and IT troubleshooting (Pro)

Who benefits

Real-world scenarios

The escalated ticket

"App won't start — port issue" lands in your queue with a screenshot of netstat and nothing else. You still don't know what owns the port on their machine.

Port Detective gives you name, path, and PID in one view and a safe kill — ticket closed in the time it used to take to translate a PID. Pro's history gives you a per-machine record.

The port that keeps coming back

You free the port, start your app, and ten minutes later a background service has grabbed it again. You're playing whack-a-mole with the same socket all day.

Port Detective Pro's Port Guard watches the port every 250 ms and can auto-end an intruder and relaunch the right owner — so the port you reserved stays yours without you babysitting it.

The "why is this open?" question

A review flags port 3389 as listening on a workstation and you have minutes, not hours, to say what owns it.

Port Detective names the process and its path on the spot, and Pro exports the finding to CSV/JSON so the answer is evidence you attach, not a claim you defend.

Deep dive

Why the port stays stuck — and why a blind taskkill is risky

When a process exits uncleanly, its socket can linger in TIME_WAIT or stay held by a child that outlived it, so the port reads as "in use" with nothing obviously running. The standard fix — copy a PID from `netstat` and `taskkill` it — has a quiet hazard: Windows recycles PIDs aggressively, so on a busy machine the ID you copied a moment ago can already belong to a different process.

Port Detective closes that gap with Process Tokens: it verifies the target's identity at the moment you click kill, so you end the process you actually identified — not whatever inherited its PID. The free edition includes 5 of those safe kills; Pro makes them unlimited and adds a Port Guard watchdog that keeps the port from being silently re-grabbed.

# The manual loop Port Detective replaces:
netstat -ano | findstr :3000
tasklist /FI "PID eq <pid>"
taskkill /PID <pid> /F

# Between line 1 and line 3, that PID can be recycled. Port Detective
# verifies process identity before it ends anything.
Trusted by pragmatic desktop users

Built for people who prefer tools that stay local.

Real workflows: focus timers that stay visible, batches that never leave the disk, and renames you can rewind.

Customer review 01

PinPoint: Always On Top saves me so much time as I can organize all my report materials without having to flip between windows or tabs. I love the fact that it is straightforward and simple.

Senior Accountant · Manufacturing Company · United States · PinPoint Reviewed About PinPoint
Customer review 02

I used to get so frustrated when my Taskbar would freeze and disappear. Taskbar Sentinel has eliminated that pain without subjecting me to another subscription.

Darren · Calgary, Alberta, Canada · Taskbar Sentinel Reviewed About Taskbar Sentinel
Customer review 03

OpticBatch and MetaForge are a lifesaver for me as a person with a passion for photography. They give me the ability to stay organized and keep personal information confidential when I post pictures online.

Sherri · United States · OpticBatch & MetaForge Reviewed Browse the full catalog

Quotes are shown with customer permission; names and locations appear as reviewers provided them.

Free vs Pro editions

Free vs Pro

Start free. Upgrade when you want the active layer.

Both editions are native Rust, signed, and telemetry-free. Pick the free finder or unlock the full toolkit with a one-time Pro purchase.

Recommended

Pro

Port Detective Pro

One-time

One-time purchase · Perpetual license · No subscription

Get it from Microsoft

Everything in Free, plus the active layer: Port Guard, remote & Docker scans, deep inspection, and exportable history.

Free

Port Detective

Free

No account · No telemetry · Microsoft Store

Get the free edition

The everyday port finder: see what is listening, who owns it, and 5 kills to try safe termination.

CapabilityFree Pro
Live listening-port viewer with process name, PID & pathIncluded in FreeIncluded in Pro
Instant port lookup (type a port, get the process)Included in FreeIncluded in Pro
Safe, Process-Token-guarded kills5 free killsUnlimited
TCP + UDP across IPv4 and IPv6Not in FreeIncluded in Pro
Port Guard watchdog (250 ms) with auto-remediationNot in FreeIncluded in Pro
Remote scans of VMs, Docker bridges & serversNot in FreeIncluded in Pro
Docker host-to-container port mappingNot in FreeIncluded in Pro
Deep parent/child process inspectionNot in FreeIncluded in Pro
Connection-history timeline with CSV / JSON exportNot in FreeIncluded in Pro
Per-port notes with backup & restoreNot in FreeIncluded in Pro
Ctrl+K command palette & copy-as-commandNot in FreeIncluded in Pro
Get it from Microsoft Get the free edition

Our Core Moat

Engineered to respect your system boundaries.

System Resource Monitor (Idle State Comparison)
Automata Labs low idle memory footprint compared to generic Electron applications

Lightweight Native Stack

Compiled Rust core wrapped inside an optimized Tauri shell. No heavy background node loops or duplicate Chromium engines cooking your memory footprint (<25MB idle RAM).

100% Local-First Privacy

Executes entirely on-device with full offline isolation. Absolute zero background telemetry policies, no metrics aggregation, and zero mandatory cloud-sync accounts.

Perpetual Fallback Licenses

Pay a single, clear one-time purchase price. Own your specific native software utility execution tier permanently without artificial subscription paywalls or ongoing usage tax.

FAQ

Straight answers—no glossary dump

How do I find what's using the port on Windows?

The manual way is `netstat -ano | findstr :PORT` then `tasklist` to translate the PID. Port Detective does it in one step: type the port and see the process name, full path, and PID in a live list — then end it safely if you need to.

Is it safe to kill the process — and will I kill the wrong one?

That's the real risk with the manual approach: Windows recycles PIDs, so the number you copied from netstat can point at something else by the time you run taskkill. Port Detective verifies process identity with a Process Token before it ends anything. The free edition includes 5 of these safe kills to try; Port Detective Pro makes them unlimited.

What does Port Detective Pro add over the free edition?

Free is the everyday finder: live port list, instant search, process name and path, and 5 one-time safe kills (they don't reset). Pro unlocks unlimited kills and the active layer — a Port Guard watchdog that re-frees a port every 250 ms, TCP + UDP across IPv4/IPv6, remote and Docker-aware scans, deep process inspection, exportable connection history, per-port notes, and a Ctrl+K palette. One-time purchase, no subscription, no telemetry.

Is Port Detective local-first, and how do I get it?

Yes — it reads your machine's own networking stack with no account, no cloud, and no telemetry for core use, and installs from the Microsoft Store. The free edition and Port Detective Pro are both listed there.

Related pages

Something's on port 443. Find it. Free it. Get back to work. The duplicate bind isn't on your laptop. It's on the box you shipped to. Kill the right process. Not the one that recycled its PID. Find what’s using the port. Instantly. No terminal required.

Stop debugging your OS.
Start shipping your code.

Find the process on any port and kill it safely with the free edition. Port Detective Pro adds the active layer — a background Port Guard watchdog, remote and Docker-aware scans, deep process inspection, and exportable history. One-time purchase, no subscription, no telemetry.

Pay once. Own it forever.

One-time purchase on the Microsoft Store · No subscription · Instant install

Get it from Microsoft

Buy through the Microsoft Store—instant install, automatic updates, and a Microsoft receipt for easy expensing. No account needed on our site, and no subscription on Store purchases.

Open full product page

Technical specifications

Technical specifications for procurement

Spec Implementation
Data Sovereignty Port and process data stays on the workstation; core features make no external network calls and no cloud dashboard is involved
Telemetry Status None; signed builds, no telemetry
Core Runtime Native Windows app built entirely in Rust (Tauri 2); typically under 50 MB RAM
Network Requirements Local inspection is fully offline; remote scans and Docker mapping are user-initiated outbound actions, not telemetry
Deployment Compatibility Windows 10 and 11; free edition plus one-time Pro purchase on the Microsoft Store
Free edition Live listening-port viewer, instant lookup, token-guarded safe kills
Pro — Port Guard Tray daemon polls watched ports every 250 ms with optional auto-remediation
Pro — Coverage TCP + UDP across IPv4/IPv6, remote scans, Docker host-to-container mapping
Pro — Workflow Ctrl+K palette, process lineage, connection history + CSV/JSON export, per-port notes