Skip to content
SPECIFICTION
Get listed

Unicornscan

unicornscan.org

Free plan WebmacOSLinuxAPISelf-hosted
Visit unicornscan.org
Spec score 7.5 #17 of 26 in Port Scanner Software

What it is

Unicornscan is a free network reconnaissance tool that sends asynchronous, stateless probes and records responses. Its documented scan modes include TCP SYN scans, UDP probes with protocol-specific payloads, local-network ARP discovery, and stateless TCP traceroute. Alicorn provides a web interface for reviewing results, with scan history, host and port statistics, OS fingerprinting, and network topology visualization. The pgsqldb module can export results to PostgreSQL, which Alicorn uses for storage; Alicorn also starts a PostgREST API with its web server. Optional free DB-IP Lite databases add country, city, and ASN lookups to scan output and the interface. Packages are listed for Debian, Ubuntu, Fedora, RHEL-compatible distributions, and macOS through Homebrew or DMG. Linux capabilities are set automatically so scans can run without root privileges. The Alicorn interface requires Docker and PostgreSQL. Compound scan modes that begin with ARP are limited to targets on the local broadcast domain because ARP requests cannot cross routers. The install guide directs users to the project website and GitHub Issues for support.

Spec sheet

Purpose
Unicornscan is an asynchronous stateless network stimulus delivery and response recording tool for scalable, high-speed network reconnaissance.Read 2 Oct 2026 · unicornscan.org
API
The Alicorn startup process launches a PostgREST API alongside the web server.Read 2 Oct 2026 · unicornscan.org
Support
The install guide points users to the project website and GitHub Issues for support and bug reports.Read 2 Oct 2026 · unicornscan.org
Creator
The project README says Unicornscan was created by Jack C. Louis.Read 2 Oct 2026 · github.com
Database integration
The pgsqldb module can export scan results to PostgreSQL, which Alicorn uses for data storage.Read 2 Oct 2026 · unicornscan.org
Discovery and tracing
Documented scan modes include local-network ARP discovery and stateless TCP traceroute.Read 2 Oct 2026 · github.com
GeoIP
Optional free DB-IP Lite databases enable country, city, and ASN lookups in scan output and the web interface.Read 2 Oct 2026 · unicornscan.org
Network scope limit
Compound modes beginning with ARP require targets on the local broadcast domain because ARP requests cannot cross routers.Read 2 Oct 2026 · github.com
Permissions
The package guide says Linux capabilities are set automatically so scans can run without root privileges.Read 2 Oct 2026 · unicornscan.org
Requirements
The Alicorn web interface requires Docker and PostgreSQL for data storage.Read 2 Oct 2026 · unicornscan.org
Supported systems
Prebuilt packages are listed for Debian, Ubuntu, Fedora, RHEL-compatible distributions, and macOS via Homebrew or DMG.Read 2 Oct 2026 · unicornscan.org
TCP and UDP scanning
The getting-started guide documents TCP SYN scans and UDP probes with protocol-specific payloads.Read 2 Oct 2026 · github.com
Web interface
Alicorn is a web interface for viewing and analyzing scan results, including scan history, host and port statistics, OS fingerprinting, and network topology visualization.Read 2 Oct 2026 · unicornscan.org

Plans and prices

Unicornscan Free GPL software · downloadable packages and source Read 2 Oct 2026 · github.com

Every Unicornscan plan and price →

Strong points and limits

Strong points

  • Includes TCP SYN, UDP, ARP, and TCP traceroute modes.
  • Alicorn displays scan history and network topology.
  • Can export results to PostgreSQL.
  • Linux scans can run without root privileges.

Limits

  • Alicorn requires Docker and PostgreSQL.
  • ARP-based compound modes are limited to the local broadcast domain.
  • No free trial is listed.

Who it suits

Unicornscan suits users conducting network reconnaissance who want documented TCP, UDP, ARP, and traceroute scan modes. Users seeking web-based result analysis should account for Alicorn’s Docker and PostgreSQL requirements.

Verdict

Unicornscan pairs command-line reconnaissance with Alicorn’s web-based analysis and API. Its ARP scope limit and the web interface’s database and Docker requirements matter when choosing a deployment.

Where Specifiction places it

Alternatives to UnicornscanAll alternatives →