← CSI Knowledge

Portmaster by Safing

name
Portmaster by Safing
source
Notion CSI Technology Register
csi_tech_id
112
category
Cyber Security
csi_classification
Assessment Pending
lifecycle_status
Not started
client_approved
No
commercial_use
Requires Review
current_version
2.2.1
risk_flag
Caution
official_url
https://safing.io/
documentation_url
https://wiki.safing.io/
last_verified
migration_status
Imported
tags
csi-technology-register, notion-migration
06-Cybersecurity/Portmaster by Safing.md

Portmaster by Safing

Purpose

Open-source endpoint application firewall for monitoring and controlling Windows/Linux network connections with per-app rules and DNS filtering.

Decision Summary

Promising endpoint visibility and control tool, but network-stack interception and paid-feature boundaries require controlled Windows/Linux pilots and rollback testing.

Use Cases

Application traffic visibility; outbound control; tracker/malware-domain blocking; secure DNS; per-app internet/LAN restrictions; optional paid SPN privacy routing.

Field Notes

Pilot before client use. Test DNS, VPN, RDP, RustDesk/VNC, EDR, WSL/containers, domain services, updates, monitoring, backup agents, LAN discovery and rollback.

Hardware Requirements

No authoritative minimum found. Requires supported Windows or Linux, administrative rights and compatible network/kernel components; benchmark resource use on representative endpoints.

Backup Strategy

Not a backup product. Preserve known-good network configuration and policy exports where supported; maintain independent endpoint/data backups.

Recovery Strategy

Keep local console and approved disable/uninstall path; restore prior DNS/network state and validate LAN, internet, VPN and remote management after rollback.

Secure Boot Notes

Not bootable. Validate official driver/module signing and operation on Secure Boot-enabled endpoints; do not disable Secure Boot without approved exception.

Version History

GitHub showed v2.2.1 as latest during review on 2026-08-04; Safing announced split tunneling for 2.2.1 in July 2026.

Technology Register Metadata

  • CSI Classification: Assessment Pending
  • CSI Tech ID: 112
  • Category: Cyber Security
  • Client Approved: No
  • Commercial Use: Requires Review
  • Current Version: 2.2.1
  • Deployment: Native
  • Docker Support: No
  • Documentation URL: https://wiki.safing.io/
  • Evidence Complete: No
  • Last Updated: August 4, 2026 2:35 AM
  • Licence: GPL-3.0 open-source core; optional Plus/Pro subscriptions and SPN services have separate commercial terms.
  • Lifecycle Status: Not started
  • OS Support: Linux, Windows
  • Official URL: https://safing.io/
  • Offline Capability: 3
  • Offline Support: Partial
  • Risk Flag: Caution
  • Ventoy Compatibility: Not Applicable

Migration Record

Imported deterministically from the CSI Technology Register.

Source classifications, approval state, risk state, version information and testing status have been preserved. No additional approval or validation has been inferred during migration.

Cyber Space Infocom
Making Technology Work for You