Nmap vs PortScan.com

Nmap is a free, open-source utility for discovering networks and auditing security. It uses raw IP packets to identify available hosts, services and versions, operating systems, and packet filters or firewalls. Scanning options include TCP and UDP ports, OS and version detection, and ping sweeps. Network administrators can use it to inventory systems, plan service upgrades, and monitor host or service uptime. The Nmap Scripting Engine runs bundled or user-written scripts in parallel for networking tasks such as discovery and vulnerability checks. The suite also includes Zenmap, a graphical interface and results viewer; Ncat for data transfer and debugging; Ndiff for comparing scan results; and Nping for packet generation and response analysis. Most port-scan types require privileged access to send and receive raw packets, although unprivileged users can run connect and FTP bounce scans. Nmap is not a comprehensive vulnerability scanner. End-user use is free, but redistribution in commercial products requires an OEM license. Quarterly OEM licenses start at $9,980.00 per 3 months for eligible small or startup companies.

PortScan.com is a free cloud service that checks TCP ports on the public IP address making the request and reports whether each is open, closed or filtered. Fast scan checks 32 common ports in about 20 seconds. Deep scan checks all 65,535 TCP ports and includes service version detection. The target comes from the visitor’s connection, so another IP address cannot be entered. An API offers polling endpoints and a streaming v2 endpoint, requires no signup or API key, and supports IPv4 and IPv6. Webhook callbacks can report scan completion or failure for CI/CD pipelines and monitoring scripts. An MCP server provides fast_scan and deep_scan tools with setup instructions for several coding and chat tools. The API supports JSON exports, TCP scans only, and results expire after 24 hours. PortScan.com lists scanning nodes in the Netherlands, France and the UK, with results stored in an EU database. It says metadata is logged for 180 days and that the scan is a basic port check, not a security audit; results may be incomplete or inaccurate.