RealSec

Software you can trust on your own machine.

RealSec is a small security software company in Poland. We build precise tools for security teams, compliance officers and developers, and hold them to the standard we sell.

Precise
Each tool does one job and shows its working. When a number appears on screen, you can trace where it came from.
No telemetry
Our software does not report what you do. No usage analytics, no trackers, nothing sent home to improve the product. This site follows the same rule.
Yours to run
Where it can, the work happens on your machine or your own servers. Builds are signed, failure is designed in advance: NetWard fails open, so a bug of ours never takes your network down.

Products

Five instruments for two kinds of work. NetWard and snif are made for anyone with a Mac. RealSec, Iodynka and tinbe serve regulated organisations in Poland.

NetWard

Launching January 2027

See and decide every connection your Mac makes.

A per app firewall built on Apple’s Network Extension. Unknown connections stop and ask: allow or deny, for one host or the whole app, once or forever. Live connection map, terminal monitor, camera and mic watch. Signed, notarized, and it fails open on its own errors, so your network never breaks because of it.

Type
Application firewall
Platform
macOS
Market
Worldwide
Highlights
Free monitor, Personal 49 EUR, Team via MDM, Final testing now
Visit netward.dev
NetWard in Geek mode: the live connection map with apps around This Mac, allowed connections in blue, blocked ones in red and connections waiting for a decision in amber.
Screenshot. The live connection map in Geek mode.

snif

In development

See every request between the containers on your laptop.

A native sniffer for the stack running on your laptop. It captures HTTP/1.1, HTTP/2, gRPC, Redis and Postgres between containers, draws the topology with latency on every edge, and follows one request across services as a causal trace. Injecting latency and faults from the menu bar comes next.

Type
Network observability for developers
Platform
macOS, Apple Silicon
Market
Worldwide
Highlights
Live capture, Topology, Causal trace, Free and Pro
Visit devsniff.com
Diagram: the shop-local demo stack. Gateway, web, checkout, payments, inventory, Redis, Postgres and a WebSocket notifier, with protocols on each edge and one request traced from gateway to payments. shop-local one request, traced HTTP HTTP/1.1 gRPC h2c RESP WebSocket Postgres gateway nginx web Node checkout Go payments Python inventory Rust redis Redis ws-notifier Node postgres Postgres
Diagram. The demo stack snif is built and tested against.

RealSec

Live

GDPR, DORA, NIS2, AI Act and ISO 27001 in one engine.

Processes, systems, vendors and regulations kept as one model instead of a dozen spreadsheets. Signals reach the person who owns the problem, the risk engine and maturity reports run on the same data, and modules switch on with the licence. Also sold as documentation packs for ICT suppliers under DORA and NIS2.

Type
Governance, risk and compliance
Platform
Web, SaaS or on premises
Market
Poland, regulated sector
Highlights
12 modules, Maturity levels 0 to 5, DORA and NIS2 packs
Visit realsec.pl
Diagram: maturity by framework on a scale of 0 to 5, achieved levels in blue and target levels outlined in amber. Maturity by framework level 0 to 5 012345 GDPR DORA NIS2 AI Act ISO 27001 current level target
Diagram, illustrative data. Maturity reports run on every control.

Iodynka

Live in Poland

The working desk of a data protection officer.

Records of processing, DPIA, data subject requests and a map of where personal data lives, built on the RealSec engine and shaped for one job: running GDPR in a small or mid sized organisation. Available as a hosted service or a desktop installation.

Type
Data protection office
Platform
Web or Windows desktop
Market
Poland
Highlights
Records of processing, DPIA, Subject requests, Data map
Visit iodynka.pl
Diagram: a data map linking processing activities to systems and personal data categories, with recruitment flagged because it touches health data and needs a DPIA. Processing Systems Data categories Recruitment Payroll Newsletter Building CCTV HR system Finance system Mailing platform Video recorder Contact details Identity documents Health data Bank account Image DPIA required special category data in recruitment
Diagram, illustrative data. The data map behind the records of processing.

tinbe

Early access

From regulation to evidence.

The working system of a compliance officer. New regulations are parsed into obligations, each obligation reaches the person who owns it through a signed magic link, and the evidence comes back into an audit trail kept as a hash chain. Conflicts of interest, gifts, a policy hub, whistleblowing and a board report run on the same engine.

Type
Compliance operations
Platform
Web, SaaS or on premises with a local LLM
Market
Poland, organisations of 250 to 5000 people
Highlights
Regulatory horizon, Magic links, Hash chain audit trail, Board report
Visit tinbe.pl
Diagram: a regulation is parsed into an obligation, routed to its owner by magic link, answered with evidence and rolled into the board report, every step sealed into a hash chain. From regulation to evidence Regulation Obligation Owner Evidence Board report magic link, 7 days #3f9a #4151 #4308 #44bf #4676 Audit trail, hash chain Each step is sealed into the chain; changing any entry breaks every hash after it.
Diagram, illustrative data. How an obligation travels to evidence.

About

RealSec is one founder, Błażej Lewartowski, and a short list of products worth putting a name on.

The company started with compliance software for the Polish regulated market, where RealSec, Iodynka and tinbe help organisations meet GDPR, DORA and NIS2 and run compliance day to day. The same habits now go into tools for everyone else: NetWard, a firewall for the Mac, and snif, which shows developers the traffic inside their local stack.

Small on purpose. Every product is designed, built and supported by the same person, so a question sent to hello@realsec.dev is read by someone who knows the code. Products ship when they pass testing, and the status next to each one says exactly where it stands.

Legal name
Błażej Lewartowski, trading as RealSec
Tax ID (NIP)
PL 5242414096
Registered address
ul. Świeradowska 47, 02-662 Warsaw
Country
Poland, European Union

Contact

hello@realsec.dev
Buying a licence
Licences for all products are sold through the RealSec shop. Visitors from Poland are taken to the Polish store automatically. Until a product launches, the shop takes pre-orders.
Questions and support
Write to the address above. Mention the product and, for licences, your order number.
Security reports
Same address, with "security" in the subject. Reports are read first.