Nmap

Overview

Nmap is a network mapper for administrators and security practitioners who need to identify hosts, open ports, and running services. Its broad scanning and scripting capabilities make it a strong fit for network discovery and auditing, but vulnerability assessment is only one part of its role.

That distinction matters: Nmap can run vulnerability checks, yet it is not a comprehensive vulnerability scanner. Choose it to map and examine networks; look elsewhere if a full vulnerability-scanning program is the primary need.

Key features

Network discovery and administration

Nmap uses raw IP packets to identify available hosts, services and versions, operating systems, and packet filters or firewalls. TCP and UDP port scanning, ping sweeps, OS detection, and version detection support network inventory, service-upgrade planning, and host or service uptime monitoring. The range is useful for practitioners who need to understand what is reachable, though most scan types require privileged access to send and receive raw packets. Unprivileged users can run connect and FTP bounce scans, a narrower choice for restricted environments.

Scripting and companion tools

The Nmap Scripting Engine runs bundled or user-written scripts in parallel to automate networking tasks, including discovery and vulnerability checks. This flexibility helps with repeatable tasks, but does not turn Nmap into a complete vulnerability scanner. The suite also includes Zenmap, a GUI and results viewer; Ncat for data transfer and debugging; Ndiff for comparing scan results; and Nping for packet generation and response analysis.

OEM integration and licensing

For embedding Nmap in a commercial product, the project recommends running it and parsing its XML output, while also permitting other integration approaches. Source code is available for inspection and security auditing. Commercial redistribution requires a separate OEM license, so the free end-user option is not a route to bundling Nmap in commercial software or hardware.

Pricing

The Nmap free end-user license costs free. It suits individual end users, but excludes redistribution within commercial software or hardware products. The free version has no warranty and community support. A free trial is also offered.

OEM licenses are for makers that need commercial redistribution rights. Quarterly term licenses include maintenance and cover all company products for eligible small/startup and mid-sized companies; the enterprise term covers redistribution in a product line or category. The prices are $9,980 a month for the small/startup tier, billed $9,980 per 3 months; $13,980 a month for mid-sized companies, billed $13,980 every 3 months; and $17,980 a month for enterprise, billed $17,980 every 3 months. The quarterly license can be terminated for a full refund within its first 30 days.

Perpetual OEM licenses cost $59,980 as a one-time purchase for small/startup companies, $89,980, paid once for mid-sized companies, and $119,980, paid once for enterprise. These are one-time fees; annual maintenance is optional at $17,980, $22,980, and $29,980 respectively. Small/startup eligibility is limited to companies with 50 or fewer employees and no more than US$10 million revenue. Mid-sized eligibility is limited to 500 or fewer employees, revenue under US$200 million, and, for publicly traded companies, market capitalization under $1 billion. Enterprise licenses cover redistribution in a product line or category and have no per-seat royalties. Perpetual licenses include six months to cancel for a full refund. OEM maintenance subscriptions include commercial technical support.

Platforms

Nmap is a desktop utility with command-line access, path visualization, DNS diagnostics, and packet-loss analysis. It supports Windows, macOS, Linux, FreeBSD, OpenBSD, NetBSD, Solaris, Amiga, and HP-UX. The broad operating-system coverage suits mixed environments; users should still account for the privileged-access requirement of most raw-packet scan types.

Who it's for

Nmap is best suited to network administrators and security practitioners who need host and service discovery, port scanning, and scriptable network tasks across varied systems. Its free end-user license makes it accessible for direct use. It is less suitable as the sole choice for comprehensive vulnerability scanning, or for commercial product makers unwilling to take on OEM licensing costs.

Pros and cons

Pros: TCP and UDP scans, host discovery, OS and version detection, and scripting bring several network-mapping tasks into one utility.

Pros: Zenmap, Ncat, Ndiff, and Nping extend the suite with a GUI, transfer and debugging, scan comparison, and packet analysis tools.

Pros: Broad support across desktop operating systems helps in heterogeneous environments.

Cons: Most scan types need privileged access, limiting options for unprivileged users.

Cons: NSE vulnerability checks do not make Nmap a comprehensive vulnerability scanner.

Cons: Commercial redistribution requires a separate OEM license, with quarterly options billed every three months and high one-time perpetual fees.

Alternatives

For a scanner focused on vulnerability scanning, compare options in Vulnerability Scanning Software; Nmap's vulnerability checks are not comprehensive. For a broader port-scanning shortlist, see Port Scanner Software. For network-focused diagnostics, browse Network Diagnostic Software.

ScanSearch is a freemium option for Linux, web, and API use; its paid Internet Scanner plan is billed per kpps/month and includes unlimited results per scan, full CSV/JSON export, and a queue of up to 10 scans. Consider it when those stated scan and export terms fit better.

Naabu is a free, MIT-licensed port-scanning tool for Linux, macOS, Windows, API, and self-hosted environments. Pentest-Tools Port Scanner offers a free tier with open-port and service discovery and a paid NetSec tier starting from $95/month. RustScan is a free, open-source port scanner, with Android support in addition to desktop platforms. NetsCLI is a free, MIT-licensed option for Linux, macOS, and Windows, with its library and MCP server published on crates.io for Rust projects. Masscan is free software under the GNU Affero General Public License v3. Unicornscan is GPL software with downloadable packages and source. Angry IP Scanner is a free, open-source GPLv2 option for Linux, macOS, and Windows.

Verdict

Choose Nmap if you need a flexible, scriptable utility for mapping hosts, ports, and services across a wide range of systems. Its broad discovery capabilities and companion tools are the main reasons to choose it; the clearest reasons to look elsewhere are the privileged-access needs of most scan types, its limits as a vulnerability scanner, and the cost of OEM redistribution.