Turn your Android phone into a full-featured local web server.
Host websites, serve files, manage traffic — right from your pocket.
CYBER//HOST packs a full server stack into a single Android app — no root required, no cloud, no subscriptions.
Serve any static website, HTML app, or file collection to devices on your local Wi-Fi network. Enable HTTPS with a self-signed or custom TLS certificate for encrypted connections.
Upload, download, and manage your website files from any FTP client — FileZilla, WinSCP, CyberDuck, and more. Enable FTPS for encrypted transfers.
Browse, rename, delete, and preview your hosted files directly inside the app. No FTP client required for quick edits.
Your server addresses front-and-centre, with one-tap copy and instant QR codes so any device on your network can connect immediately.
Watch every HTTP request scroll in real-time with method, path, status code, latency, and the requesting IP — just like a real server console.
Deep insights into your server's performance — live throughput, historical speed chart, per-IP stats, and a traffic heatmap.
Plug in a USB OTG drive and import a complete website in seconds, or back up your hosted files straight to the drive. No cables to a PC needed.
Set automatic start and stop times so your server only runs when you need it — perfect for overnight demos or timed local sites.
Point CYBER//HOST at any HTTP URL on your local network and serve that content — great for proxying another device's dev server to the rest of your LAN.
A glanceable widget on your home screen shows server status at a glance and lets you start or stop the server without opening the app.
No configuration files, no SSH — just install, tap start, and your website is live on your local network.
Download CYBER//HOST from the Google Play Store and open it. The app starts with your HTTP server ready to go on port 8080 and FTP on port 2121.
Open any FTP client (FileZilla, WinSCP, CyberDuck — even your file manager) and connect to the FTP address shown in the Status tab. Upload your HTML, CSS, JS, and image files to the website folder.
The Status tab shows your local address (e.g., http://192.168.1.42:8080). Tap it to copy or scan the built-in QR code with any device on the same Wi-Fi network to open your site instantly.
Head to Settings to enable HTTPS, set a website password, configure the IP blocklist, turn on DDoS protection, or tweak any of the 30+ options to make the server exactly how you want it.
CYBER//HOST isn't just a server — it's a hardened server. Every layer of protection is toggleable with a single switch.
Serve your website over HTTPS using a self-signed certificate generated on-device, or import your own custom certificate. Also supports FTPS for encrypted FTP transfers.
Password-protect your website entirely. Only users with the correct credentials can browse your hosted content. Fully themeable auth dialogs.
Manually block specific IP addresses from accessing your HTTP or FTP servers. Blocked IPs receive an immediate connection drop.
Sliding-window rate limiter throttles any IP that sends too many requests in a given time window — fully configurable max requests and window duration.
Automatically bans bots and scanners that probe known attack paths like wp-login.php, .env, phpinfo.php, and dozens more. Add your own custom bait paths.
Restrict access by network origin. Choose to block all WAN (internet) traffic and allow only local network clients, or vice versa — great for purely internal tools.
Automatically block known malicious scanners and bots by User-Agent string — including sqlmap, nikto, nmap, masscan, and more. Add your own custom block rules.
Tracks failed authentication attempts per IP. After a configurable number of failures within a time window the IP is automatically banned from further login attempts.
Lock the Settings panel behind your device's fingerprint or face unlock so no one else can change your server configuration.
Enable and configure Cross-Origin Resource Sharing headers — set specific allowed origins or use a wildcard for open access.
All served files are strictly sandboxed to the app's private website directory. Path traversal attempts (../) are detected and rejected — your device files are always safe.
No analytics, no ad SDKs, no crash reporters, no tracking of any kind. CYBER//HOST contains zero third-party tracking code. All data stays on your device.
Every theme is applied globally — dashboard, dialogs, sub-pages, and the server's own web UI all update instantly.
Every option saves the moment you change it — no restart button, no fuss.
No subscriptions. No servers. Just your phone.
GET IT ON GOOGLE PLAY