ScanSearch
scansearch.net
What it is
ScanSearch is a cloud service for on-demand network exposure checks. It runs live SYN scans and detects services on specified targets, which can be IP addresses, CIDR or country ranges, ASNs, or resolved domains. Its Nmap-based engine identifies software, versions, and protocols from more than 12,000 signatures covering over 1,200 services. Depending on enabled modules, results can add TLS/SSL details, HTTP security headers, geolocation, technology stack information, and CVE matches. Results appear in a live dashboard and can be exported as TXT, JSON, or CSV. The REST API supports JSON, webhooks, batch operations, and an official Python SDK and CLI. Separate tools automate Google dork queries and monitor attack surfaces with scheduled scans, change tracking, dashboards, and alerts. Scan data is retained for 7 days on free accounts and 90 days on paid accounts. ScanSearch requires permission for every target and describes its use as authorized security testing, network administration, and research. A free plan and trial are available; the listed paid Internet Scanner plan costs $0.30 a month, billed per kpps/month.
Spec sheet
- What it does
- ScanSearch runs on-demand live SYN scans and service detection against specified targets and returns current network exposure results.Read 30 Sep 2026 · scansearch.net
- Intended users
- ScanSearch identifies security researchers, penetration testers, red teams, bug bounty hunters, blue teams, and defenders as intended users.Read 30 Sep 2026 · scansearch.net
- Security
- The privacy policy says ScanSearch uses HTTPS encryption, secure password hashing, firewall protection, and regular security audits.Read 30 Sep 2026 · scansearch.net
- Privacy
- The privacy policy says scan data is stored in the account and accessible only to the account holder, and that ScanSearch does not sell, rent, or share personal data or scan results with third parties except for listed service and legal exceptions.Read 30 Sep 2026 · scansearch.net
- Compliance
- The Internet Scanner page labels the service GDPR compliant.Read 30 Sep 2026 · scansearch.net
- Support
- The site advertises live support and says it typically replies within minutes.Read 30 Sep 2026 · scansearch.net
- Headquarters
- SpainRead 28 Sep 2026 · scansearch.net
- API and integrations
- The REST API supports JSON, webhooks, batch operations, and an official Python SDK and CLI.Read 30 Sep 2026 · scansearch.net
- Dork Search
- Dork Search automates Google dork queries and offers a catalog of more than 1,000 pre-built queries, batch processing, and TXT, CSV, or JSON exports.Read 30 Sep 2026 · scansearch.net
- Enrichment
- Scan results can include TLS/SSL details, HTTP security headers, geolocation, technology stack, and CVE matches, depending on enabled modules.Read 30 Sep 2026 · scansearch.net
- Exports
- Scanner results can be viewed in a live dashboard and exported as TXT, JSON, or CSV.Read 30 Sep 2026 · scansearch.net
- Monitoring
- Attack Surface Monitoring offers scheduled scans, change tracking, team dashboards, and email or webhook alerts for new exposures.Read 30 Sep 2026 · scansearch.net
- Retention
- The privacy policy states scan data is retained for 7 days on free accounts, 90 days on paid accounts, and as agreed for Enterprise accounts.Read 30 Sep 2026 · scansearch.net
- Service detection
- Its Nmap-based detection engine identifies software, version, and protocol using more than 12,000 signatures covering over 1,200 services.Read 30 Sep 2026 · scansearch.net
- Targets
- Targets can include IPs, CIDR ranges, country ranges, ASNs, and resolved domains.Read 30 Sep 2026 · scansearch.net
- Use restrictions
- ScanSearch says users must have permission to scan any target and describes the service as intended for authorized security testing, network administration, and research.Read 30 Sep 2026 · scansearch.net
Plans and prices
Strong points and limits
Strong points
- Targets include IPs, ranges, ASNs, and resolved domains.
- Detection uses over 12,000 signatures across 1,200+ services.
- Results export to TXT, JSON, or CSV.
- REST API includes webhooks, batch operations, Python SDK, and CLI.
- Monitoring supports scheduled scans and change tracking.
Limits
- Scanning requires permission for every target.
- Free Internet Scanner limits scans to 1,000 results and one at a time.
- Free scan data is retained for 7 days.
- Internet Scanner paid plan is $0.30 a month, billed per kpps/month.
Who it suits
ScanSearch is aimed at security researchers, penetration testers, red teams, bug bounty hunters, blue teams, and defenders. It also describes authorized network administration and research as intended uses.
ScanSearch in depth
Read the full write-up
ScanSearch is a cloud service for live internet scanning, Google dork searches, and attack-surface monitoring. It is best suited to security practitioners who need current exposure results and want search and scheduled monitoring alongside them. Its breadth is useful, but each tool has its own quotas and pricing, and scans are for authorized targets only.
Overview
The Internet Scanner runs on-demand SYN scans and identifies services on IPs, CIDR and country ranges, ASNs, and resolved domains. Its Nmap-based engine uses more than 12,000 signatures across over 1,200 services to identify software, versions, and protocols. Enabled modules can add TLS/SSL details, HTTP security headers, geolocation, technology stack, and CVE matches, making it more informative than a port check when the task is to understand exposed services. That added context depends on the modules enabled.
Results appear in a live dashboard and can be exported as TXT, JSON, or CSV. The REST API supports JSON, webhooks, and batch operations; an official Python SDK and CLI give teams additional ways to integrate it. ScanSearch also separates Google dork searching and recurring exposure monitoring into distinct tools, so buyers should judge their limits and costs independently.
Key features
Search and monitoring
Dork Search automates Google dork queries, includes a catalog of more than 1,000 pre-built queries, and supports batch processing and TXT, CSV, or JSON exports. It is useful for repeatable query work, but it is not included as an unlimited companion to scanning: its plans cap search frequency, pages, and results.
Attack Surface Monitoring adds scheduled scans, change tracking, team dashboards, and alerts. The Pro plan scans daily but has no webhook notifications; Business scans every six hours and adds webhooks. These are meaningful differences for teams that need faster change awareness or automated alert routing.
Privacy and security
Scan data is retained for seven days on free accounts and 90 days on paid accounts; Enterprise retention is agreed separately. Scan data is account-only, subject to listed service and legal exceptions, and the privacy policy says personal data and scan results are not sold, rented, or shared with third parties outside those exceptions. ScanSearch also says it uses HTTPS encryption, secure password hashing, firewall protection, and regular security audits. Its Internet Scanner page labels the service GDPR compliant.
Pricing
The Internet Scanner has a free plan with 1 kpps speed, one scan at a time, up to 1,000 results per scan, exports limited to 100 rows, and no API access. That can suit occasional, small checks, but the result and export caps make it a poor fit for larger scans or automated workflows. The paid Internet Scanner is priced at $0.30 a month, billed per kpps/month, for 100–10,000 kpps, unlimited results per scan, full CSV/JSON export, a queue of up to 10 scans, API access, and 90-day retention. Enterprise has custom pricing and adds speed volume discounts, dedicated scan servers, an unlimited scan queue, scheduled and recurring scans, webhook and SIEM integration, an SLA, and a dedicated account manager.
Dork Search Free has no published price and allows two searches per hour, three pages per search, and up to 20 results, with no batch mode, limited export, and no API. Pro costs $39 a month for 30 searches per hour, 15 pages per search, up to 1,000 results, batches of 10 queries, full CSV/JSON export, and API access. Business costs $99 a month and raises those caps to 100 searches per hour, 50 pages, 5,000 results, and batches of 50. Pro fits moderate query workloads; Business is for heavier use where its higher throughput and batch size justify the step up.
Attack Surface Monitoring Free has no published price and covers one asset with weekly scans and seven days of history, without email or webhook alerts or API access. Pro costs $49 a month for 25 assets, daily scans, 30 days of history, email alerts, and API access, but no webhooks. Business costs $149 a month for 100 assets, scans every six hours, 90 days of history, email and webhook notifications, and API access. The free tier is a narrow single-asset option; Pro suits modest monitoring needs, while Business is the stronger fit when asset count, scan cadence, and webhook alerts matter.
Platforms
ScanSearch is cloud-deployed and lists Linux, web, and API platforms. It covers internet targets and supports scheduled scans, OS detection, API access, and TXT, JSON, and CSV exports. The site advertises live support and says it typically replies within minutes.
Who it's for
ScanSearch identifies security researchers, penetration testers, red teams, bug bounty hunters, blue teams, and defenders as intended users. It is a sensible fit for authorized practitioners who value service identification, enrichment, exports, and optional search or monitoring in one cloud service. Users must have permission to scan every target. Anyone seeking only a free, local scanner may prefer a standalone alternative instead.
Pros and cons
Pros: Broad target support and service signatures provide more context than open-port results alone.
Pros: TXT, JSON, and CSV exports, API access, webhooks, batch operations, a Python SDK, and a CLI support integration and follow-on analysis.
Pros: Separate search and monitoring products add query automation, change tracking, scheduled scans, and tiered alerting.
Cons: The free scanner caps results at 1,000 per scan, limits exports to 100 rows, and excludes API access.
Cons: Search and monitoring have separate plans and quotas, so buyers combining tools must account for multiple subscriptions.
Cons: Monitoring Pro lacks webhooks, while the free tier has no alerts or API access; teams needing automated notifications must move up.
Alternatives
For a broader set of options, compare Port Scanner Software. Choose Nmap if you want a free option across Linux, macOS, self-hosted, and Windows, subject to its end-user license restriction on redistribution within commercial products. Naabu is a free, MIT-licensed port-scanning tool for API, Linux, macOS, self-hosted, and Windows environments.
Pentest-Tools Port Scanner is another freemium web and API option, with open-port and service discovery on its free plan and a NetSec plan starting from $95/month. Choose RustScan for a free open-source scanner across Android, Linux, macOS, self-hosted, and Windows. NetsCLI is a free, MIT-licensed option for Linux, macOS, and Windows, with its library and MCP server published for Rust projects.
Masscan is free software under the GNU Affero General Public License v3 for Linux, macOS, self-hosted, and Windows. Unicornscan offers free GPL software with downloadable packages and source. Angry IP Scanner is a free and open-source GPLv2 option for Linux, macOS, and Windows.
Verdict
ScanSearch is the right choice for authorized security practitioners who want current internet exposure scans with service identification, export and API paths, and the option to add Google dork search or scheduled monitoring. Its strongest reason to choose it is that combination of scanning, enrichment, and adjacent tools; its strongest reason to look elsewhere is the separate product pricing and the scanner’s tight free-plan caps. For a focused free scanner, a standalone alternative is likely the better fit.
Verdict
ScanSearch combines live scanning, service identification, exports, and optional enrichment with separate search and monitoring tools. Check the limits and retention for the relevant plan, and scan only targets you are authorized to assess.
Where Specifiction places it
- Port Scanner Software#14 of 267.8