For us to dig deeper, I'd like you to report back with your hardware configuration as well as confirm what version of the OS you are running (25.10.1 or earlier?). There were some issues with the TrueNAS SCALE network reporting graphs in earlier releases. We'd also like to see a packet cap or something more than just a domain to prove what you're claiming here. Maybe wireshark monitor? Did you configure anything within TrueNAS SCALE's UI itself at any point or did you just utilize the HexOS dashboard for all your needs?
Lots of things could account for the disk activity itself (such as background tasks or maintenance operations like the scrub that happens by default once a month) but the network activity is not us. StorJ is the used by TrueCloud if you configure your server to use it for backups (not something we support via HexOS today at all). Furthermore, the storj connection and the websocat connections are independent of each other. Websocat is used to make an outbound connection from a HexOS server to our Command Deck as outlined in one of our earlier blog posts here: https://docs.hexos.com/blog/2024-07-30.html. That's it. We do not and cannot transfer your data via that connection. The entirety of that connection is to give us API access to manage your system via our interface at deck.hexos.com.
This ties back to something in TrueNAS and not anything with HexOS. Once you've unclaimed your system, we no longer have any access to do anything with your system.
Generally speaking, it was quite an alarmist post and makes some pretty aggressive claims about data being "exfiltrated", that we were "misleading" about our product, and that you haven't seen any "meaningful updates."
This was stated in our very first blog post that I previously linked but you won't by reliant on deck.hexos.com for long: https://docs.hexos.com/blog/2025-11-25.html. Furthermore, having a management interface hosted via cloud doesn't go against self-hosting as a concept. All of your data and applications are still running local on your LAN, which gives you the value of self-hosting. Management interactions for most customers are limited to initial setup of storage, folders, users, and applications. Once running, users mostly just interact with the applications and data, which run entirely local.
Ultimately we want to know if this is a real bug/issue that ties back to TrueNAS SCALE so we can escalate to the right people or if this is simply a misunderstanding or misconfiguration. In reviewing multiple test systems we have configured and going back over a month in the network reporting, we see no significant network activity that matches anything close to what you are reporting.