Features

Everything PathMRI checks.

Grouped by the question each one answers. Every feature has a page of its own, and the manual goes deeper still.

Answer the question

Can this reach that, on this port — and if not, what stopped it.

Path verification Predict from policy, probe with a real packet, reconcile the two. The disagreement is the finding. The Unified Map The whole estate on one screen, and the fastest way to run a check: click a source, click a destination, add the ports. Application-aware checks 72 applications, 124 components and 328 ports with direction, so you check an application rather than a port number.

Read what the network says

Policy, translation, tunnels, routes and names — the four things that decide a packet's fate, and the one that decides which packet you sent.

Firewall & cloud policy Thirteen policy sources, each through its own API or CLI, with the deciding rule quoted by name. NAT, declared and observed Thirteen sources modelled, and the address the far end actually saw. VPN & tunnels Four detection signals, phase 1 and phase 2 kept apart, counters watched moving, and the bypass named. Routing & asymmetry Path drift, routing drift, and whether the answer comes back the way it went out. DNS from the source host Resolved where the application resolves it, including the hosts file and other vantage points. Kubernetes & Docker The agentless container engine: cluster map, reachability matrix, exposure scan and drift.

Keep it that way

A path that worked on Tuesday is not evidence about Thursday.

Drift detection Snapshot, compare, and see what a change broke before the incident call starts. Rogue ports and baselines Unexpected listeners, triaged against the applications the host is supposed to run. The fix, and the report 89 remediation write-ups offline, plus a printable compliance report.

How it reaches a host

The transport changes what PathMRI can see. It never changes what PathMRI claims.

Three modes, six transports Agentless, agent or ephemeral — what each one can see, and what it leaves behind. Two of the three leave nothing.

Every feature here is in the manual too. These pages say what a capability is for; the manual says what every field, option and verdict means — for the version you are running.

Download Open the manual