WinSight review
A free Windows suite for per-application outbound control and security visibility.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
WinSight is a free, open-source Windows security suite from eDeveloppe, aimed at users who want application-level control over outbound traffic alongside broader security checks. Its firewall applies per-application allow and block policies through the Windows Filtering Platform. It supports Windows 10 and 11 on x64 and Arm64, with desktop, tray, and command-line applications. A local read-only MCP server is also available for compatible AI clients.
The firewall’s workflow is centered on review before enforcement. WinSight starts in audit-only mode, allowing users to examine behavior before explicitly enabling protection. Once armed, the optional firewall service applies outbound policies, but installing and activating that service requires elevation and it is not installed by default. The suite also provides live outbound connection and DNS visibility, camera and microphone access monitoring, and opt-in ransomware activity detection. Startup persistence scanning covers 22 autostart families, while Authenticode verification includes catalog fallback and the hijack scanner checks service paths and phantom DLL risks.
WinSight is a focused choice for Windows users who need outbound application policies and want related inspection tools in one open-source package. It is less suitable for teams seeking a firewall that controls inbound and outbound traffic, offers per-connection interactive prompts, or provides documented central management. The product’s narrow Windows scope also makes it a poor fit for mixed-platform environments. Choose it when local outbound enforcement, audit mode, and Windows security visibility are the priorities; choose an alternative when broader network direction control or centralized administration matters more.
WinSight pros and cons
- Where it wins
- Per-application outbound policies enforced through Windows Filtering Platform
- Audit-only mode helps review behavior before enforcement is enabled
- Adds startup, DNS, signature, hijack, and ransomware detection tools
- Where it doesn't
- Windows-only support limits cross-platform use
- Firewall controls cover outbound traffic rather than both directions
- Service installation and arming require elevation and are not enabled by default
WinSight fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update