Masscan vs Nmap
Masscan
github.comNmap
nmap.orgSide by side
| Figure | Masscan | Nmap |
|---|---|---|
| Price from | Free | $9,980/mo |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | Yes | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 2 | 7 |
| Spec score · Port Scanner Software | 8.7 (#2) | 8.3 (#6) |
| Integrations | The project describes PF_RING DNA support for high-speed packet transmission and says Masscan can use PF_RING ZC when the adapter name indicates it. | For OEM integration, the project recommends running Nmap and parsing its XML-formatted output, and also permits other approaches such as parsing normal output or processing its data files. |
| Notable limitation | Masscan requires users to specify ports and accepts IP addresses or simple ranges rather than DNS names as targets. | The project says Nmap is not a comprehensive vulnerability scanner, although NSE can perform vulnerability checks. |
| Platforms | Linux is the primary target; the code also runs on Windows and macOS, and the README gives build instructions for FreeBSD. | Official binary packages are listed for Windows, macOS, and Linux, and the project also provides source code for other operating systems. |
| Purpose | Masscan is an Internet-scale TCP port scanner designed for wide-range scanning of many machines. | Nmap is a free and open-source utility for network discovery and security auditing. |
| Scanning | It supports arbitrary port and address ranges and asynchronous transmission. | Nmap supports TCP and UDP port scanning, OS detection, version detection, and ping sweeps. |
Plans
Nmap
- Nmap free end-user licenseFree
- Nmap OEM Small/Startup Company Redistribution License (quarterly term)$9,980 a month
- Nmap OEM Mid-Sized Company Redistribution License (quarterly term)$13,980 a month
- Nmap OEM Enterprise Redistribution License (quarterly term)$17,980 a month
- Nmap OEM Small/Startup Company Redistribution License (perpetual)$59,980, paid once
- Nmap OEM Mid-Sized Company Redistribution License (perpetual)$89,980, paid once
- Nmap OEM Enterprise Redistribution License (perpetual)$119,980, paid once
In their own words
Masscan
Masscan is a free command-line TCP port scanner for scanning many machines across wide address ranges. The project says one machine can transmit 10 million packets per second. It supports asynchronous transmission, arbitrary port and address ranges, and scanning IPv4 and IPv6 together without a separate IPv6 mode. Banner checks cover protocols and services including FTP, HTTP, IMAP4, memcached, POP3, SMTP, SSH, SSL, SMBv1, SMBv2, Telnet, RDP and VNC. Results can be saved as XML, binary, grepable, JSON or list output. Its usage and output are intended to be familiar to Nmap users, with some Nmap-compatible options. Masscan runs on Linux, macOS and Windows and is available for self-hosting. The project describes PF_RING DNA support for high-speed transmission and says it can use PF_RING ZC when the adapter name indicates it. It is free software under the GNU Affero General Public License version 3, whose notice states there is no warranty. Users must specify ports and target IP addresses or simple ranges; DNS names are not accepted. The README warns that its custom TCP/IP stack can conflict with the local stack and describes using a separate source IP or firewalling its source port.
Nmap
Nmap is a free, open-source utility for discovering networks and auditing security. It uses raw IP packets to identify available hosts, services and versions, operating systems, and packet filters or firewalls. Scanning options include TCP and UDP ports, OS and version detection, and ping sweeps. Network administrators can use it to inventory systems, plan service upgrades, and monitor host or service uptime. The Nmap Scripting Engine runs bundled or user-written scripts in parallel for networking tasks such as discovery and vulnerability checks. The suite also includes Zenmap, a graphical interface and results viewer; Ncat for data transfer and debugging; Ndiff for comparing scan results; and Nping for packet generation and response analysis. Most port-scan types require privileged access to send and receive raw packets, although unprivileged users can run connect and FTP bounce scans. Nmap is not a comprehensive vulnerability scanner. End-user use is free, but redistribution in commercial products requires an OEM license. Quarterly OEM licenses start at $9,980.00 per 3 months for eligible small or startup companies.