Skip to content
SPECIFICTION
Get listed

Sherlock Forensics Port Scanner

sherlockforensics.com

Free plan WindowsLinux
Visit sherlockforensics.com
Spec score 7.4 #19 of 26 in Port Scanner Software

What it is

Sherlock Forensics Port Scanner is a free desktop GUI tool for identifying exposed TCP ports and the services behind them. It scans the top 1,000 TCP ports by default, accepts custom port and CIDR ranges, and can scan all 65,535 TCP ports. For open ports, it retrieves service banners to identify software and version strings. Scans use TCP connect with the full three-way handshake; SYN scans are not supported. Results export to CSV with timestamps, target host, port, protocol, state and service identification. Each export includes an Ed25519-signed sidecar with the CSV’s SHA-256, signature, per-installation public key and UTC timestamp. The scanner identifies ports and services but does not check results against CVE databases or attempt exploitation. It runs on Windows and Linux. Version 0.1.7 supports 64-bit Windows 10/11 as a single executable without installation dependencies or elevated privileges; the native Linux x64 binary requires libgtk-3, libfontconfig1 and libxkbcommon. The free plan has no trial period, feature restrictions or expiry.

Spec sheet

Purpose
Sherlock Forensics Port Scanner scans TCP ports, identifies open ports, grabs service banners, and maps target hosts’ attack surfaces.Read 7 Oct 2026 · sherlockforensics.com
Intended users
The maker describes it as a lightweight GUI scanner for penetration testers, compliance auditors, and system administrators.Read 7 Oct 2026 · sherlockforensics.com
Headquarters
Burnaby, British Columbia, CanadaRead 28 Sep 2026 · sherlockforensics.com
Founded
2006Read 28 Sep 2026 · sherlockforensics.com
Maker
The maker identifies itself as Sherlock Forensics and describes itself as a Vancouver cybersecurity firm with more than 20 years of experience.Read 7 Oct 2026 · sherlockforensics.com
Export
Scan results can be exported to CSV with timestamps, target host, port, protocol, state, and service identification.Read 7 Oct 2026 · sherlockforensics.com
Integrity
CSV exports include an Ed25519-signed sidecar containing the CSV’s SHA-256, signature, per-installation public key, and UTC timestamp.Read 7 Oct 2026 · sherlockforensics.com
Limitations
UDP scanning, SYN scanning, NSE scripting, and OS fingerprinting are not supported.Read 7 Oct 2026 · sherlockforensics.com
Linux requirements
A native Linux x64 binary is available and requires libgtk-3, libfontconfig1, and libxkbcommon.Read 7 Oct 2026 · sherlockforensics.com
Not a vulnerability scanner
The product identifies ports and services but does not match findings against CVE databases or attempt exploitation.Read 7 Oct 2026 · sherlockforensics.com
Ports and targets
It scans the top 1,000 TCP ports by default, supports custom port ranges and CIDR ranges, and can scan all 65,535 TCP ports.Read 7 Oct 2026 · sherlockforensics.com
Scan type
It performs TCP connect scans using the full three-way handshake and does not support SYN scans.Read 7 Oct 2026 · sherlockforensics.com
Service detection
It grabs service banners from open ports to identify software and version strings.Read 7 Oct 2026 · sherlockforensics.com
Support and download
The download form says email is optional and can be skipped to download directly; providing an email triggers three product introduction emails over two weeks.Read 7 Oct 2026 · sherlockforensics.com
Windows requirements
Version 0.1.7 supports Windows 10/11 64-bit as a single executable with no installation dependencies or elevated-privilege requirement.Read 7 Oct 2026 · sherlockforensics.com

Plans and prices

Free Free No trial period · no feature restrictions · no expiry Read 7 Oct 2026 · sherlockforensics.com

Every Sherlock Forensics Port Scanner plan and price →

Strong points and limits

Strong points

  • Free plan has no feature restrictions or expiry
  • Scans custom port and CIDR ranges
  • Exports CSV with signed integrity sidecar
  • Windows version needs no elevated privileges

Limits

  • No SYN or UDP scanning
  • Does not match findings against CVE databases
  • Linux binary requires three listed libraries
  • No OS fingerprinting

Who it suits

The maker describes the scanner for penetration testers, compliance auditors and system administrators mapping network exposure. It may suit users who need TCP port and service identification rather than vulnerability matching or exploitation.

Verdict

The scanner provides TCP port discovery, banner identification and signed CSV exports at no cost. Its scope is limited to identifying ports and services, without vulnerability checks, exploitation or several other scan functions.

Where Specifiction places it

Alternatives to Sherlock Forensics Port ScannerAll alternatives →