Dashboard
Protection, firewall, and connection status at a glance — active connections, blocked IPs, and a live activity graph, all updating in real time from the moment you launch.
Windows Network Protection
Welcome to Thomsen Software.
Real-time connection monitoring, automatic abuse blocking, and full Windows Firewall control — in one clean, lightweight app built for people who actually want to see what's happening on their network.
How it works
Three things, done well.
Thomsen Shield doesn't try to do everything. It watches your connections, flags what looks wrong, and gives you full control over Windows Firewall — nothing more, nothing hidden.
01
Monitor
See every active connection on your PC — the app behind it, the remote address, and its status — updated live.
02
Detect
Connection spikes and repeated connections from one IP are flagged automatically, with a sensitivity level you control.
03
Control
Block an IP or app in one click, or manage Windows Firewall rules directly — Thomsen Shield only ever touches rules it created.
Features
Everything you need, nothing you don't.
A full set of network and firewall tools in one deliberately minimal interface.
Live Connections
Every active TCP/UDP connection, with its app, remote address, and status, updated live. Block, allow, or copy an IP straight from its details.
Protection
Flags connection spikes, repeated connections from one IP, and port-scanning, plus checks every connection against a live threat-intel feed — with Low / Normal / High sensitivity. Lockdown Mode raises that to High automatically when needed.
DNS Protection
Blocks lookups for domains on a maintained malware and command-and-control list, so infected software can’t reach them. Your DNS settings are restored exactly when you turn it off.
Firewall
View, create, enable, disable, and remove rules — all prefixed so Thomsen Shield only ever touches what it created. Built on Windows Firewall, not a replacement for it.
Blocklist & Allowlist
Every blocked IP with its reason and expiration. Trusted IPs and private ranges are protected automatically; add, remove, or make any block permanent yourself.
Events & Logs
A filterable activity history, exportable to TXT or JSON. Blocks, rule changes, and detected spikes all land here, so nothing goes unrecorded.
Product
One price. Yours for good.
No subscriptions, no tiers to compare. Buy once, use it for as long as you own a Windows PC.
Thomsen OSINT
€10
one-time
Lifetime license · Windows 10 / 11
Pre-order- Username search across 30+ platforms
- Domain, DNS & subdomain intelligence
- IP, ISP & geolocation lookup
- Local-first — no cloud or telemetry
Main Product
Thomsen Shield
€30
one-time
Lifetime license · Windows 10 / 11
Purchase- Live connection monitoring
- Automatic abuse detection & blocking
- Full Windows Firewall control
- Free updates for the life of the license
- Blocklist, allowlist & exportable logs
Covered by our 14-day refund policy.
Thomsen VM
Free
Free program · Windows 10 / 11
VM Download- Guided VM creation wizard with ISO auto-detection
- UEFI and Legacy BIOS firmware, per VM
- Snapshots (create, restore, delete)
- Live CPU, RAM, disk, and network monitoring
Thomsen Shield
€30 one-time · Lifetime license · Windows 10 / 11
- Live connection monitoring
- Automatic abuse detection & blocking
- DNS protection against malware and command-and-control domains
- Threat-intelligence blocklist for known-malicious addresses
- Port-scan detection
- Low / Normal / High detection sensitivity
- Lockdown Mode for fast, temporary lockdown
- Full Windows Firewall control
- Blocklist, allowlist & exportable logs
- Runs entirely locally — nothing is ever uploaded
- Admin rights requested only when a change needs them
- Free updates for the life of the license
- One device at a time, transfer anytime
Thomsen VM
Free · Windows 10 / 11
- Guided VM creation wizard with ISO auto-detection
- UEFI and Legacy BIOS firmware, per VM
- True full screen with multi-monitor support
- Scaling modes (Fit / Stretch / Native)
- Snapshots (create, restore, delete)
- Force Stop for guests that won't respond to a normal shutdown
- Live CPU, RAM, disk, and network monitoring
- App lock with password protection
- Per-VM hardware and network profiles
- Support for QEMU-backed guests such as Arch Linux, Windows, and other ISOs
Thomsen OSINT
€10 one-time · Windows 10 / 11 · Coming soon
- Concurrent username search across 30+ platforms with live status results
- Domain intelligence with DNS, RDAP/WHOIS, TLS certificates, and subdomain discovery
- IP intelligence with ASN/ISP, geolocation, and reverse DNS
- Email OSINT with optional Have I Been Pwned breach checking
- GitHub user and repository intelligence lookup
- Local file metadata extraction (EXIF, PDF, Office) — never uploaded
- Investigation case management with saved history and exportable reports
- Built-in hash toolkit (MD5, SHA-1, SHA-256, SHA-512)
- Optional local app lock with password protection and auto-lock
- Fully local-first — no cloud account, no telemetry
Discord Bot · Free
Thomsen Protection
A Discord bot for server protection and moderation.
FAQ
Questions, answered.
No. All Thomsen software is sold as a one-time purchase with no subscriptions or recurring charges. Thomsen Shield costs €30 for a lifetime license, while Thomsen OSINT costs €10 for a lifetime license.
Thomsen Shield monitors your PC's network activity, detects unusual connection spikes, and can automatically block abusive connections. It is designed as an additional defensive layer and does not claim to stop every DDoS attack.
Thomsen OSINT provides tools for username searches, domain intelligence, IP intelligence, metadata analysis, and other OSINT research from one application.
Both programs support Windows 10 and Windows 11, 64-bit.
Thomsen Shield only requests administrator rights when an action requires them, such as creating or removing Windows Firewall rules. Thomsen OSINT does not require administrator access.
Yes. You can turn on "Start with Windows" in Settings so Thomsen Shield is already monitoring as soon as you sign in.
Each license is intended for one Windows PC at a time. You can move your license to another PC when needed.
Both programs are designed to run locally wherever possible. Thomsen Shield does not upload your network activity or blocked IPs. Thomsen OSINT does not require a cloud account or telemetry. See the Privacy Policy for more information.
You can contact us within 14 days of purchase to request a refund according to our Refund Policy.