segment · network scanners
Network scanner software
Network scanners discover the live hosts, open ports and services on a network segment — the first step in inventory, troubleshooting and security auditing. This page compares widely used IP scanners and port scanners, from lightweight free tools to commercial platforms, with a link to each vendor’s official download. Scan only networks you own or are authorized to assess.
Use with authorization only. Scan networks and hosts you own or have explicit written permission to assess. Unauthorized scanning can violate acceptable-use policies and, in some jurisdictions, the law.
the shortlist
9 network scanner tools compared
Ordering is by category relevance, not by any commercial arrangement — see our methodology. 5 of 9 are open-source.
| Tool | Vendor | License | Best for | |
|---|---|---|---|---|
| Nmap | Nmap Project | Open source (NPSL) | Open-source network discovery and security auditing tool with a powerful scripting engine. | Details → |
| Wireshark | Wireshark Foundation | Open source (GPLv2) | Open-source packet analyzer for network troubleshooting, analysis and protocol inspection. | Details → |
| Angry IP Scanner | Anton Keks | Open source (GPLv2) | Lightweight, cross-platform open-source IP address and port scanner. | Details → |
| Advanced IP Scanner | Famatech | Freeware | Free Windows LAN scanner for device discovery, shared folders and remote access. | Details → |
| SoftPerfect Network Scanner | SoftPerfect | Commercial | IPv4/IPv6 scanner for device discovery, shared resource enumeration and reporting. | Details → |
| Fing | Fing | Freeware | Device discovery and network monitoring app for mobile and desktop. | Details → |
| Advanced Port Scanner | Famatech | Freeware | Free Windows port scanner for finding open ports and identifying services on a network. | Details → |
| Masscan | Robert Graham | Open source (AGPLv3) | High-speed open-source port scanner capable of scanning large IP ranges asynchronously. | Details → |
| Netdiscover | Netdiscover Project | Open source (GPLv3) | Open-source ARP reconnaissance tool for discovering hosts on local network segments. | Details → |
buyer's checklist
What to look for
- Scan type
- IP/host discovery (who is online) vs port and service scanning (what each host runs). Some tools do both.
- Platform
- Windows-only utilities vs cross-platform tools for Linux and macOS. Check whether a GUI or command line fits your workflow.
- Speed vs depth
- Asynchronous scanners cover large ranges fast; deep scanners fingerprint services and versions but run slower.
- Output & export
- CSV/XML export, reporting and integration matter if results feed an inventory or ticketing system.
- License & cost
- Free/open-source tools suit ad-hoc scans; paid tools add support, scheduling and larger-scale features.
free & open-source
Free & open-source network scanner tools
Several strong options are free or open-source, including Nmap, Angry IP Scanner and Advanced IP Scanner. They are fully usable for one-off discovery and auditing without a licence.
- NmapNPSL
- WiresharkGPLv2
- Angry IP ScannerGPLv2
- Advanced IP Scannerfreeware
- Fingfreeware
- Advanced Port Scannerfreeware
- MasscanAGPLv3
- NetdiscoverGPLv3
FAQ
Common questions
What is a network scanner?
A network scanner is software that probes a range of IP addresses to find which hosts are online and, depending on the tool, which ports and services they expose. Admins use it for inventory, troubleshooting and authorized security assessment.
What is the difference between an IP scanner and a port scanner?
An IP (host) scanner answers "which devices are on this network?" by pinging or ARP-probing a range. A port scanner goes further and checks which TCP/UDP ports are open on a host and what services run behind them. Many tools combine both.
Which network scanners are free?
Nmap, Angry IP Scanner, Advanced IP Scanner, Advanced Port Scanner, Masscan and Netdiscover are free to use; several are open-source. Check each tool’s page for its exact licence.
Is it legal to scan a network?
Scanning networks and hosts you own or have explicit written permission to test is standard practice. Scanning third-party networks without authorization can breach acceptable-use policies and, in some jurisdictions, the law.