Offline, passive diagnostics

Observe industrial communications without touching the wire.

TorchBytes builds TorchScope, a protocol-agnostic diagnostics platform that captures, decodes, and explains serial and Ethernet traffic without injecting packets or relying on the cloud.

Passive by default. Offline always. Deterministic, auditable exports.

TS

TorchScope

Session: Panel A · Modbus RTU

CaptureDecodeTimelineReportLIVE
Signal capture2 ms/div
Decoded framesFiltered: Device 0x03
TimeDirFuncAddrLenCRC
12.084RX0x030x001016OK
12.089TX0x100x002008OK
12.094RX0x060x000202OK
12.101RX0x030x001016OK

How TorchScope works

A deterministic pipeline that turns raw wire data into evidence-backed reports.

Capture

Record read-only traffic from RS-485 or Ethernet and save .capture + JSONL.

Decode

Protocol-aware decoding with framing, timing, and address visibility.

Transactions

Build request/response pairs with accurate timeout reporting.

Findings

CRC rates, jitter, poll gaps, duplicate ID suspicion, framing mismatch cues.

Report

Health report outputs in JSON, CSV, or HTML with evidence attached.

Timeline export

Replayable timeline exports for future UI ingestion and audits.

Trust posture

Designed to respect OT and cybersecurity boundaries. Observe, don’t interfere. Explain, don’t speculate.

Offline-only

No cloud dependency. Files stay on your laptop, lab, or appliance.

Read-only by default

Passive observation with no packet injection unless you explicitly enable it.

Deterministic replay

Replay captured sessions for stable, auditable findings.

Evidence-backed outputs

Reports include traceable evidence, not speculation.

Protocol and hardware roadmap

TorchScope is protocol-agnostic by design, starting with Modbus RTU and expanding to serial + Ethernet.

Modbus RTU (today)

Live capture, replay, transaction building, and health reporting.

5+ low-hanging protocols

Serial and Ethernet protocols prioritized by field demand.

TorchMonitor appliance

Always-on cabinet hardware for passive, offline diagnostics.

TorchProbe accessory

USB RS-485 tap/dongle for rapid capture sessions.

Protocol-agnostic core

Shared timeline, transaction engine, and export formats.

Future Ethernet analysis

Modbus TCP and related traffic with the same evidence pipeline.

The TorchBytes stack

Protocol-agnostic software today, passive hardware tomorrow. Built to scale across serial and Ethernet.

TorchScope

Available (Modbus RTU)

Diagnostics software for capture, replay, transactions, and health reports.

TorchMonitor

In development

Always-on cabinet appliance for passive, offline monitoring.

TorchProbe

Exploratory

USB RS-485 dongle or tap accessory using certified components where possible.

TorchOS

Future

Platform layer for managing sessions, exports, and workflows across the stack.

Built for real industrial work

Designed for commissioning, troubleshooting, and post-incident review where evidence matters.

Field technicians

Carryable diagnostics that explain timeouts, CRC spikes, and device behavior on site.

Controls integrators

Commission PLC and SCADA systems with replayable evidence for vendor sign-off.

Industrial automation teams

Use offline captures to understand health trends without changing OT boundaries.