Naabu vs PortScan.com

Naabu is a free, open-source command-line port scanner for identifying valid ports on hosts, with SYN, CONNECT, and UDP probes. It accepts hosts, IP addresses, CIDR ranges, and ASNs directly, from a file, or through standard input. Results can be emitted as JSON, CSV, text, or standard output. It supports IPv4 and experimental IPv6 scanning, DNS port scans, passive enumeration through Shodan InternetDB, and experimental host discovery. Naabu can work with Nmap for service discovery and version detection, and discovered ports can be piped to ProjectDiscovery's httpx to identify running HTTP servers. The CLI can upload or display scan results in the ProjectDiscovery Cloud dashboard. Installation options include ready-to-run binaries, Docker, and Go. Packet capture requires libpcap on Linux or macOS, or Npcap on Windows. Service version detection needs a local Nmap service-probe database or a custom path. The README recommends running as root for best results and adjusting scan flags and rate on local systems.

PortScan.com is a free cloud service that checks TCP ports on the public IP address making the request and reports whether each is open, closed or filtered. Fast scan checks 32 common ports in about 20 seconds. Deep scan checks all 65,535 TCP ports and includes service version detection. The target comes from the visitor’s connection, so another IP address cannot be entered. An API offers polling endpoints and a streaming v2 endpoint, requires no signup or API key, and supports IPv4 and IPv6. Webhook callbacks can report scan completion or failure for CI/CD pipelines and monitoring scripts. An MCP server provides fast_scan and deep_scan tools with setup instructions for several coding and chat tools. The API supports JSON exports, TCP scans only, and results expire after 24 hours. PortScan.com lists scanning nodes in the Netherlands, France and the UK, with results stored in an EU database. It says metadata is logged for 180 days and that the scan is a basic port check, not a security audit; results may be incomplete or inaccurate.