On-Site Deployment

Day One Field Kit

What walks in the door on a first visit. Network mapped, vulnerabilities flagged, and a full picture built — before most techs finish the paperwork.

Active kit — September 2026
📍 Las Vegas, NV
⚡ Commercial deployments
🎯
The approach
Most techs arrive, ask for the Wi-Fi password, and start clicking around. We arrive with automated recon already running, a live network map on a 4.3" screen, and every open port documented before the first conversation. The toolkit below is why.
Arrives with you The Hardware Kit
🥷
zangpachi
Raspberry Pi 5 field agent. Plugs into client Ethernet, begins scanning immediately. Grafana dashboard live on the 4.3" touch screen.
field agent Pi 5 · 8GB 500GB NVMe Tailscale home
👾
zangagotchi
Passive Wi-Fi recon unit. Wanders the client site collecting WPA2 handshakes autonomously. Custom Pwnagotchi build on Pi Zero 2W.
Wi-Fi recon handshake capture e-ink display
🐬
Flipper Zero
Multi-tool in your pocket. Sub-GHz, NFC/RFID cloning, IR capture, BadUSB. Unleashed firmware. Wired to zangpachi via GPIO for scripted automation.
sub-GHz NFC/RFID IR BadUSB Unleashed FW
📡
UniFi Travel Router
Creates an isolated network segment on-site. VPN tunnels everything back to home base. Your tools stay on your network, not theirs.
VPN tunnel isolated SSID client separation
🖥️
zanmac-01 (remote)
Mac Studio M5 Max back at HQ. Always connected via Tailscale. Heavy compute, Qwen2.5:7b inference, and full Hermes orchestration available from the field.
M5 Max · 64GB Tailscale Qwen2.5:7b
💻
zanglap-10124
ASUS TUF A16 work laptop. Win11 Pro + Linux dual boot. Client-facing work, documentation, remote access, and the human interface to everything else.
Ryzen 7 · 32GB Win11 + Linux RX 7700S
🖨️
Bambu Labs P1S
In-house 3D printer for custom mounts, enclosures, rack accessories, and one-off hardware. PETG and TPU capable — built for real field use, not just prototypes.
custom work PETG · TPU special requests same-day parts
What zangpachi runs Automated On Arrival
✓ Full network host discovery
✓ Open port scan (all devices)
✓ Service version fingerprinting
✓ CVE vulnerability scan (Nuclei)
✓ Web app testing (Nikto)
✓ SMB enumeration
✓ Wireless network audit (Kismet)
✓ Live traffic analysis (ntopng)
✓ Packet capture (Wireshark/tshark)
✓ Bandwidth by device (nethogs)
✓ Grafana dashboard — live
✓ Full report generated on exit
What goes home with the data After the Visit
📊
Site Report
Full network topology, device inventory, open ports, CVEs found, Wi-Fi security assessment. Delivered same day.
🔐
Wi-Fi Security Audit
Handshakes collected by zangagotchi analyzed offline. Weak passwords flagged. Coverage gaps mapped.
🤖
AI-Assisted Analysis
Scan results fed to local AI (Qwen2.5:7b or phi3:mini). Prioritized findings, plain-language explanations, recommended next steps.
"Most MSPs show up and ask for the Wi-Fi password. We show up and already know your network better than you do."
— Zangetsu, Zangbot