ContextCleaner: see every entry in the Windows 11 right-click menu, and which app added it — on the Microsoft Store.
Guided workflow variation

You can't hardenwhat you can't see listening.

Turn port 3389 from an open-port number into a named process with a real path on disk. Port Detective is the local truth that complements your scanner — with exportable history in Pro for the review trail.

Port Detective turns port 3389 into a named process with a path and PID — local truth for your review. Pro keeps an exportable history for the audit trail.

Pay once. Own it forever.

One-time purchase on the Microsoft Store · No subscription · Instant install

Get it from Microsoft

Buy through the Microsoft Store—instant install, automatic updates, and a Microsoft receipt for easy expensing. No account needed on our site, and no subscription on Store purchases.

Full PortDetective overview
One-time purchase No telemetry Local-first

windows · native Rust · free + one-time Pro · no telemetry

If this sounds like your week

"What is actually listening on port 3389?" should take seconds, not a scan window.

Whether it's a security review, a hardening pass, or a "why is port 3389 open?" question from someone above you, the job is the same: turn an open port into a named process with a real path on disk. An nmap sweep tells you the port is open. It doesn't tell you which executable to hold accountable.

Where tooling usually breaks

A port number is an accusation. A process path is evidence.

Spreadsheet inventories go stale the moment a service updates. When someone asks "what's on port 3389?" under pressure, "I think it's…" isn't an answer. You need the live owner — name, path, and PID — on the workstation in front of you.

Where PortDetective lands

From open port to process identity, on the machine, right now.

Port Detective turns port 3389 into a named owner with its full path and PID — the local truth that complements perimeter scanners instead of competing with them. Pro keeps an exportable connection history (CSV/JSON) so "what was listening, and when" is a record you can attach to the review, not a memory you have to defend.

Pay once. Own it forever.

One-time purchase on the Microsoft Store · No subscription · Instant install

Get it from Microsoft

Buy through the Microsoft Store—instant install, automatic updates, and a Microsoft receipt for easy expensing. No account needed on our site, and no subscription on Store purchases.

Compare free vs Port Detective Pro

windows · native Rust · free + one-time Pro · no telemetry

What you get

Feature highlights

Free

live listening-port visibility with process name, PID, and executable path, instant port lookup, and 5 free kills to try safe token-guarded termination.

Pro — Unlimited safe kills

end any rogue process in one click, guarded by a secure Process Token so you never terminate a recycled PID.

Pro — Port Guard

a native system-tray daemon watches your critical ports every 250 ms and can auto-kill an intruder and relaunch the right owner.

Pro — Full stack visibility

every TCP and UDP connection across IPv4 and IPv6, smooth even with thousands of connections.

Pro — Remote & Docker aware

scan VMs, Docker bridges, and network servers, and map host ports back to the container and image that published them.

Pro — Power workflow

Ctrl+K command palette, deep parent/child process inspection, connection-history timeline with CSV/JSON export, and per-port notes with backup/restore.

Both editions

native Rust, typically under 50 MB RAM, signed, no telemetry, no account wall — one-time Pro purchase on the Microsoft Store, no subscription.

Especially when

  • Find what process is using a port on Windows before you kill the wrong service
  • Resolve EADDRINUSE and listening-port conflicts without juggling netstat, tasklist, Task Manager, and Resource Monitor
  • Keep critical local ports protected from rogue processes with an always-on watchdog (Pro)
  • Map Docker host ports to containers and scan remote hosts during developer and IT troubleshooting (Pro)

Who benefits

Real-world scenarios

The "why is this open?" question

A review flags port 3389 as listening on a workstation and you have minutes, not hours, to say what owns it.

Port Detective names the process and its path on the spot, and Pro exports the finding to CSV/JSON so the answer is evidence you attach, not a claim you defend.

The staging-box surprise

It runs locally, then the staging VM throws "address already in use" on port 3389 and you're back in a laggy RDP session hunting a leftover service.

Port Detective Pro scans the remote host directly and shows the owner of port 3389 in your normal view — no remote-desktop spelunking, no risky blind taskkill on a shared box.

The port that keeps coming back

You free port 3389, start your app, and ten minutes later a background service has grabbed it again. You're playing whack-a-mole with the same socket all day.

Port Detective Pro's Port Guard watches port 3389 every 250 ms and can auto-end an intruder and relaunch the right owner — so the port you reserved stays yours without you babysitting it.

Deep dive

From an open port to an accountable process

A port scan answers "is this open?" Security work needs the next answer: "what binary is behind it, and where does it live on disk?" That mapping — port → PID → process name → executable path — is the difference between a finding you can act on and a number you have to chase.

Port Detective does that mapping locally and live, so the workstation in front of you tells the truth about port 3389 without a network round trip. Pro keeps an exportable connection history so "what was listening, and when" becomes a record you attach to the review rather than a memory you defend.

Trusted by pragmatic desktop users

Built for people who prefer tools that stay local.

Real workflows: focus timers that stay visible, batches that never leave the disk, and renames you can rewind.

Customer review 01

PinPoint: Always On Top saves me so much time as I can organize all my report materials without having to flip between windows or tabs. I love the fact that it is straightforward and simple.

Senior Accountant · Manufacturing Company · United States · PinPoint Reviewed About PinPoint
Customer review 02

I used to get so frustrated when my Taskbar would freeze and disappear. Taskbar Sentinel has eliminated that pain without subjecting me to another subscription.

Darren · Calgary, Alberta, Canada · Taskbar Sentinel Reviewed About Taskbar Sentinel
Customer review 03

OpticBatch and MetaForge are a lifesaver for me as a person with a passion for photography. They give me the ability to stay organized and keep personal information confidential when I post pictures online.

Sherri · United States · OpticBatch & MetaForge Reviewed Browse the full catalog

Quotes are shown with customer permission; names and locations appear as reviewers provided them.

Free vs Pro editions

Free vs Pro

Start free. Upgrade when you want the active layer.

Both editions are native Rust, signed, and telemetry-free. Pick the free finder or unlock the full toolkit with a one-time Pro purchase.

Recommended

Pro

Port Detective Pro

One-time

One-time purchase · Perpetual license · No subscription

Get it from Microsoft

Everything in Free, plus the active layer: Port Guard, remote & Docker scans, deep inspection, and exportable history.

Free

Port Detective

Free

No account · No telemetry · Microsoft Store

Get the free edition

The everyday port finder: see what is listening, who owns it, and 5 kills to try safe termination.

CapabilityFree Pro
Live listening-port viewer with process name, PID & pathIncluded in FreeIncluded in Pro
Instant port lookup (type a port, get the process)Included in FreeIncluded in Pro
Safe, Process-Token-guarded kills5 free killsUnlimited
TCP + UDP across IPv4 and IPv6Not in FreeIncluded in Pro
Port Guard watchdog (250 ms) with auto-remediationNot in FreeIncluded in Pro
Remote scans of VMs, Docker bridges & serversNot in FreeIncluded in Pro
Docker host-to-container port mappingNot in FreeIncluded in Pro
Deep parent/child process inspectionNot in FreeIncluded in Pro
Connection-history timeline with CSV / JSON exportNot in FreeIncluded in Pro
Per-port notes with backup & restoreNot in FreeIncluded in Pro
Ctrl+K command palette & copy-as-commandNot in FreeIncluded in Pro
Get it from Microsoft Get the free edition

Our Core Moat

Engineered to respect your system boundaries.

System Resource Monitor (Idle State Comparison)
Automata Labs low idle memory footprint compared to generic Electron applications

Lightweight Native Stack

Compiled Rust core wrapped inside an optimized Tauri shell. No heavy background node loops or duplicate Chromium engines cooking your memory footprint (<25MB idle RAM).

100% Local-First Privacy

Executes entirely on-device with full offline isolation. Absolute zero background telemetry policies, no metrics aggregation, and zero mandatory cloud-sync accounts.

Perpetual Fallback Licenses

Pay a single, clear one-time purchase price. Own your specific native software utility execution tier permanently without artificial subscription paywalls or ongoing usage tax.

FAQ

Straight answers—no glossary dump

How do I find what's using port 3389 on Windows?

The manual way is `netstat -ano | findstr :3389` then `tasklist` to translate the PID. Port Detective does it in one step: type port 3389 and see the process name, full path, and PID in a live list — then end it safely if you need to.

Is it safe to kill the process — and will I kill the wrong one?

That's the real risk with the manual approach: Windows recycles PIDs, so the number you copied from netstat can point at something else by the time you run taskkill. Port Detective verifies process identity with a Process Token before it ends anything. The free edition includes 5 of these safe kills to try; Port Detective Pro makes them unlimited.

What does Port Detective Pro add over the free edition?

Free is the everyday finder: live port list, instant search, process name and path, and 5 one-time safe kills (they don't reset). Pro unlocks unlimited kills and the active layer — a Port Guard watchdog that re-frees a port every 250 ms, TCP + UDP across IPv4/IPv6, remote and Docker-aware scans, deep process inspection, exportable connection history, per-port notes, and a Ctrl+K palette. One-time purchase, no subscription, no telemetry.

Is Port Detective local-first, and how do I get it?

Yes — it reads your machine's own networking stack with no account, no cloud, and no telemetry for core use, and installs from the Microsoft Store. The free edition and Port Detective Pro are both listed there.

Related pages

You can't harden what you can't see listening. You can't harden what you can't see listening. Kill the right process. Not the one that recycled its PID. Find what’s using the port. Instantly. No terminal required.

Stop debugging your OS.
Start shipping your code.

Find the process on any port and kill it safely with the free edition. Port Detective Pro adds the active layer — a background Port Guard watchdog, remote and Docker-aware scans, deep process inspection, and exportable history. One-time purchase, no subscription, no telemetry.

Pay once. Own it forever.

One-time purchase on the Microsoft Store · No subscription · Instant install

Get it from Microsoft

Buy through the Microsoft Store—instant install, automatic updates, and a Microsoft receipt for easy expensing. No account needed on our site, and no subscription on Store purchases.

Open full product page

Technical specifications

Technical specifications for procurement

Spec Implementation
Data Sovereignty Port and process data stays on the workstation; core features make no external network calls and no cloud dashboard is involved
Telemetry Status None; signed builds, no telemetry
Core Runtime Native Windows app built entirely in Rust (Tauri 2); typically under 50 MB RAM
Network Requirements Local inspection is fully offline; remote scans and Docker mapping are user-initiated outbound actions, not telemetry
Deployment Compatibility Windows 10 and 11; free edition plus one-time Pro purchase on the Microsoft Store
Free edition Live listening-port viewer, instant lookup, token-guarded safe kills
Pro — Port Guard Tray daemon polls watched ports every 250 ms with optional auto-remediation
Pro — Coverage TCP + UDP across IPv4/IPv6, remote scans, Docker host-to-container mapping
Pro — Workflow Ctrl+K palette, process lineage, connection history + CSV/JSON export, per-port notes