HostedScan Security vs Naabu
HostedScan Security
hostedscan.comNaabu
github.comSide by side
| Figure | HostedScan Security | Naabu |
|---|---|---|
| Price from | $39/mo | Free |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 4 | 1 |
| Spec score · Port Scanner Software | 8.1 (#8) | 8.8 (#1) |
| Audience | HostedScan says its service is intended to make continuous vulnerability scanning and risk management more accessible to businesses, including MSPs. | ProjectDiscovery describes Naabu as designed for attack-surface discovery in bug-bounty work and penetration tests. |
| Integrations | The pricing page names AWS, Azure, Vanta, and Slack integrations, and says integrations automate target imports, notifications, and compliance management. | It integrates with Nmap for service discovery and can pipe discovered ports to ProjectDiscovery's httpx tool. |
| Support | Professional includes priority support and onboarding, and the pricing page lists [email protected] for questions and support. | The repository links to the ProjectDiscovery Discord community. |
Plans
HostedScan Security
- Basic$39 a month
- Premium$109 a month
- Professional$189 a month
- Flex$3,500 a year
In their own words
HostedScan Security
HostedScan Security has no write-up on Specifiction yet; its figures are above.
Naabu
Naabu is a free, open-source command-line port scanner for identifying valid ports on hosts, with SYN, CONNECT, and UDP probes. It accepts hosts, IP addresses, CIDR ranges, and ASNs directly, from a file, or through standard input. Results can be emitted as JSON, CSV, text, or standard output. It supports IPv4 and experimental IPv6 scanning, DNS port scans, passive enumeration through Shodan InternetDB, and experimental host discovery. Naabu can work with Nmap for service discovery and version detection, and discovered ports can be piped to ProjectDiscovery's httpx to identify running HTTP servers. The CLI can upload or display scan results in the ProjectDiscovery Cloud dashboard. Installation options include ready-to-run binaries, Docker, and Go. Packet capture requires libpcap on Linux or macOS, or Npcap on Windows. Service version detection needs a local Nmap service-probe database or a custom path. The README recommends running as root for best results and adjusting scan flags and rate on local systems.