Naabu vs ScanSearch
Naabu
github.com
ScanSearch
scansearch.netSide by side
| Figure | Naabu | ScanSearch |
|---|---|---|
| Price from | Free | $0.30/mo |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | — | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 9 |
| Spec score · Port Scanner Software | 8.8 (#1) | 7.8 (#14) |
| Intended users | The README describes Naabu as designed to work with other tools for attack surface discovery in bug bounties and penetration tests. | ScanSearch identifies security researchers, penetration testers, red teams, bug bounty hunters, blue teams, and defenders as intended users. |
| Service detection | Naabu can identify services by port and detect service versions using Nmap service probes. | Its Nmap-based detection engine identifies software, version, and protocol using more than 12,000 signatures covering over 1,200 services. |
| Support | The repository links to the ProjectDiscovery Discord community. | The site advertises live support and says it typically replies within minutes. |
Plans
ScanSearch
- Internet Scanner — paid$0.30 a month
- Dork Search — Pro$39 a month
- Attack Surface Monitoring — Pro$49 a month
- Dork Search — Business$99 a month
- Attack Surface Monitoring — Business$149 a month
- Attack Surface Monitoring — FreePrice not published
- Dork Search — FreePrice not published
- Internet Scanner — EnterprisePriced on request
- Internet Scanner — FreePrice not published
In their own words
Naabu
Naabu is a free, open-source command-line port scanner for identifying valid ports on hosts, with SYN, CONNECT, and UDP probes. It accepts hosts, IP addresses, CIDR ranges, and ASNs directly, from a file, or through standard input. Results can be emitted as JSON, CSV, text, or standard output. It supports IPv4 and experimental IPv6 scanning, DNS port scans, passive enumeration through Shodan InternetDB, and experimental host discovery. Naabu can work with Nmap for service discovery and version detection, and discovered ports can be piped to ProjectDiscovery's httpx to identify running HTTP servers. The CLI can upload or display scan results in the ProjectDiscovery Cloud dashboard. Installation options include ready-to-run binaries, Docker, and Go. Packet capture requires libpcap on Linux or macOS, or Npcap on Windows. Service version detection needs a local Nmap service-probe database or a custom path. The README recommends running as root for best results and adjusting scan flags and rate on local systems.
ScanSearch
ScanSearch is a cloud service for on-demand network exposure checks. It runs live SYN scans and detects services on specified targets, which can be IP addresses, CIDR or country ranges, ASNs, or resolved domains. Its Nmap-based engine identifies software, versions, and protocols from more than 12,000 signatures covering over 1,200 services. Depending on enabled modules, results can add TLS/SSL details, HTTP security headers, geolocation, technology stack information, and CVE matches. Results appear in a live dashboard and can be exported as TXT, JSON, or CSV. The REST API supports JSON, webhooks, batch operations, and an official Python SDK and CLI. Separate tools automate Google dork queries and monitor attack surfaces with scheduled scans, change tracking, dashboards, and alerts. Scan data is retained for 7 days on free accounts and 90 days on paid accounts. ScanSearch requires permission for every target and describes its use as authorized security testing, network administration, and research. A free plan and trial are available; the listed paid Internet Scanner plan costs $0.30 a month, billed per kpps/month.