CyberScope® Air

WiFi Vulnerability Scanner & Tester

CyberScope Air enables SecOps or NetOps teams to discover, validate, and scan edge infrastructure and IoT, OT, and ICS devices whether WiFi or Bluetooth/BLE. Assessing cybersecurity posture of WLANs against policies, generating reports, and performing ongoing monitoring for changes has never been easier.

CyberScope Air also contains all the wireless testing, troubleshooting, and surveying features present in the AirCheck G3 Pro making it a comprehensive WiFi vulnerability scanner AND wireless network performance tester.

  • Validate edge infrastructure hardening, including wireless access point security
  • Verify secure baselines, rapidly identify deviations
  • Automate network discovery and vulnerability scanning
  • Hunt down rogue devices
  • Perform spectrum analysis, investigate suspect RF interference
  • Visualize WiFi and BT/BLE device location with AirMapper™ Site Survey
  • Maps to key CIS Critical Security Controls / NIST Cybersecurity Framework Core Functions
  • Wireless discovery with integrated vulnerability scanning – Quickly inventory infrastructure and WiFi and Bluetooth/BLE/IoT/OT/ICS devices, locate rogue assets, scan for vulnerabilities with integrated Nmap technology, and compare against baselines.
  • Simple UI / secure remote access – Valuable for all staffing levels; expert staff can remotely assist from anywhere.
  • WiFi security validation – Supports WiFi 2.4, 5 and 6 GHz bands, offers numerous advanced cybersecurity capabilities to test for presence and use of wireless attributes (WiFi PMF/Personal/Client Isolation, mDNS/ ZeroConf, and beaconing).
  • Link-Live collaboration, reporting, and analytics platform – Maximize team efficiencies, enhance assessments/audits, improve WiFi cybersecurity posture with the combination of CyberScope and Link-Live.

IMPORTANT NOTES: WiFi 6/6E regulatory compliance implementation of the 6GHz spectrum varies by country.

CyberScope models are available in three versions: Full Tri-Band (capability across the entire 6GHz band), Partial Tri-Band (capability for only certain channels in the 6GHz band as determined by 802.11d regulatory domain information), and Dual Band Only (for countries where operation in the 6GHz band is not allowed.) Be sure to select the model that is certified for use in your specific country. Please contact your NetAlly reseller for more information.

Model/Name Description


CYBERSCOPE-AIR mainframe (FULL TRI-BAND) with one year of AllyCare support (CYBERSCOPE AIR-1YS), NXT-1000 Spectrum Analyzer, G3-PWRADAPTER, EXT-ANT-TRIBAND directional antenna, Quick Start Guide, and hardened carry case.

Click here to see kit


CYBERSCOPE-AIR-E mainframe (PARTIAL TRI-BAND) with one year of AllyCare support (CYBERSCOPE AIR-1YS), NXT-1000 Spectrum Analyzer, G3-PWRADAPTER, EXT-ANT-TRIBAND directional antenna, Quick Start Guide, and hardened carry case.

Click here to see kit


CYBERSCOPE-AIR-C mainframe (DUAL BAND) with one year of AllyCare support (CYBERSCOPE AIR-1YS), NXT-1000 Spectrum Analyzer, G3- PWRADAPTER, EXT-ANT-TRIBAND directional antenna, Quick Start Guide, and hardened carry case.

Click here to see kit

Item Details
4.98 in x 7.68 in x 1.65 in (102 mm x 196 mm x 42 mm)
1.05 lbs. (0.48 kg)
Rechargeable lithium-ion battery pack (3.63 V, 9.75 A, 35.39 Wh)
Battery Life
  • Typical operating life is 10 hours (Battery life from full charge varies depending on the feature being used)
  • Typical charge time is 3-4 hours
5.0-inch color LCD with capacitive touchscreen (720 x 1280 pixels)
Host Interfaces
  • (2) USB Type-A Ports
  • USB Type-C Power and On-the-Go Port
  • RP-SMA External Antenna Port
USB Type-C 45-W adapter: 100-240 Vac, 50-60 Hz; DC Output Power 15 V (3 A)
Internal Radios
  • Testing – 2×2 Tri-band 802.11ax wireless radio (IEEE 802.11a/b/g/n/ac/ax compliant)
  • Management – 1×1 Dual-band 802.11ac Wave 2 + Bluetooth 5.0 and BLE wireless radio (IEEE 802.11a/b/ g/n/ac compliant)
Specification Compliance
IEEE 802.11a, 802.11b, 802.11g, 802.11n, 802.11ac, 802.11ax
WiFi Connectivity
802.11a, 802.11b, 802.11g, 802.11n, 802.11ac, 802.11ax
Operating Frequencies

Frequencies of channels received and transmitted:

  • 2.4 GHz band: 2.412 to 2.484 GHz (channel 1 to channel 14) *
  • 5 GHz band: 5.170 to 5.320 GHz, 5.500 to 5.700 GHz, 5.745 to 5.825 GHz (channel 36 to channel 165) *
  • 6 GHz band: 5.925 to 7.125 GHz (channel 1 to channel 233) *


(*) Where allowed by country regulations

NOTE: The tester transmits only on the frequencies allowed in the country where it is operating

Operating Temperature

32°F to 113°F (0°C to +45°C)

NOTE: The battery will not charge if the internal temperature of the device is above 95°F (35°C)

Operating relative humidity (% RH without condensation)
  • 90% (50°F to 95°F; 10°C to 35°C)
  • 75% (95°F to 113°F; 35°C to 45°C)
Storage Temperature
-4°F to 140°F (-20°C to +60°C)
Shock and Vibration
Meets the requirements of MIL-PRF-28800F for Class 3 Equipment
IEC 61010-1:2010: Pollution degree 2
Operating: 4,000 m; Storage: 12,000 m
  • IEC 61326-1: Basic Electromagnetic Environment
  • CISPR 11: Group 1, Class A
Feature Capability CyberScope
(Wired / Wireless)
(Wireless only)
(Wired only)

Endpoint & Network Discovery 1

Find & locate endpoints, device security problem ID

Automated Discovery Monitoring

Identify new/missing/changes in devices & networks

Automated Network Topology Mapping via Link-Live 1

Intuitive network architecture visualization

Integration of Nmap into AutoTest & Network Discovery

Vulnerability detection scanning for in-depth visibility

Standalone Nmap App

Efficient one-off Nmap scan execution

Path Analysis

Quickly trace layers 2 and 3 route to locate any device

Discover SSID, AP, & Clients

Wi-Fi security validation, identify endpoints

Rogue AP & Wireless Client Locate

Rapidly pinpoint physical position

Wi-Fi Site Survey

Device detection & mapping, including those from physically adjacent networks

Bluetooth/BLE Site Survey

Detection of possible illicit devices

Wi-Fi Interference (DOS) Detection

Detect possible RF-based denial of service (DOS)

AirWISE® Automated Wi-Fi security problem detection

Automated Wi-Fi security problem detection and advice

RF Spectrum Analysis

Detailed visualization across frequency bands

Portable Line Rate Packet Capture

Assured capture for forensic traffic analysis

AutoTest: DHCP, DNS, Default Gateway validation

Detects DHCP/DNS spoofing/second offers

AutoTest: VLAN ID, Monitoring, Device Reachability

Validate network segmentation; prevent lateral movement

Remote View/Control 1

Secure enterprise-wide/off-site collaboration between local staff and centralized experts

Option to Disable Functionality 2

Temporarily or permanently disable certain features to meet a variety of security needs

Network Connectivity & Performance Testing Capabilities 3

Ethernet Copper - 10/100 Mbps - 1/2.5/5/10 Gbps

Ethernet Fiber - 1/10 Gbps

Link AutoTest & nearest switch ID

Wi-Fi Connection & Roaming Test

Full views into potential connection and roaming problems

Wiremap & Toner - Cable

Connectivity validation, cable locating

AirMapper™ Site Survey 1

Perform Wi-Fi site surveys and generate heat maps in Link-Live

Ping/TCP Connect Utility

Validate and monitor responsiveness, connectivity, and port(s) state

iPerf Performance Test

Test connections to a NetAlly test accessory or server

Line Rate Performance Test (up to 10Gpbs)

Measure 10G line rate with multiple streams (requires 2 units, compatible with EtherScope® nXG and LinkRunner® 10G)

1 AirMapper enhanced site survey visualizations, Network Topology Mapping, Network Discovery, and Remote View/Control are available to customers with AllyCare support.

2 CyberScope allows disabling of specific product capabilities for use in secure environments.

3 Additional network test capabilities available, see EtherScope nXG.