Pentest-Tools Port Scanner

Pentest-Tools Port Scanner is a cloud-hosted network scanner that uses Nmap to identify open TCP and UDP ports and the services running on network targets. Enter a domain, an IP address, or a network range; bulk IP ranges are supported. Light scans check the top 100 TCP and UDP ports, while deep scans can cover up to 65,535 ports. Options include service-version and operating-system detection, TCP SYN, full TCP connect, and UDP scanning. Findings can be exported as CSV, JSON, or PDF. The product describes scheduled and parallel scans, notifications, API access, and scan-template workflows, with integrations including Jira, Slack, Microsoft Teams, Discord, webhooks, Nucleus, Vanta, Burp Suite, AWS, Azure Marketplace, and GitHub Actions. Internal targets require its VPN Agent, and internal network scanning is an optional add-on. A Free plan is listed; paid plans start at $95/month. A seven-day trial of the full scanner requires a business email and card; cancel before day eight to pay nothing.

The scanner combines configurable network scans with exports and automation options. The Free plan covers open-port and service discovery, while paid plans start at $95/month.

It suits security consultants, internal security teams, and managed security providers looking to scan network targets. Teams that need internal scans should account for the VPN Agent and optional add-on.

Pentest-Tools Port Scanner is a cloud-hosted Nmap service for discovering open ports and identifying network services. It fits consultants, internal security teams, and managed providers that need repeatable scans rather than a one-off command-line check. The main trade-off is that broader team workflows sit in paid plans, while internal-network coverage requires an extra VPN Agent arrangement.

Overview

The scanner covers internet-facing infrastructure from a web interface and API, with support for hostnames, single IP addresses, network ranges, public-facing systems, private clouds, and internal networks through its VPN Agent. Its cloud deployment removes the need to maintain a scanning host, but organizations with firewall-bound assets must budget for the optional internal-network-scanning add-on.

PentestTools SA, founded in 2017 and headquartered in Bucharest, says its information-security management system is certified to ISO/IEC 27001:2023 across development, infrastructure, support, and corporate operations. Customer data is encrypted at rest with AES-256 and in transit with TLS 1.2 or newer, and scan data is not used to train public models.

Key features

Light scans inspect the top 100 TCP and UDP ports, giving teams a faster routine inventory. Deep scans can examine all 65,535 ports when incomplete exposure data would be a serious risk. TCP SYN, full TCP connect, and UDP modes accommodate different network conditions, while service-version and operating-system detection add identifying context to raw port results.

Targets may be entered as a domain, IP address, or range, including bulk IP ranges. Findings export as CSV, JSON, or PDF, so the same scan can feed technical analysis or a report for stakeholders. Scheduled and parallel scans, notifications, API access, and scan-template workflows make recurring checks practical rather than manual. The integration set includes Jira, Slack, Microsoft Teams, Discord, webhooks, Nucleus, Vanta, Burp Suite, AWS, Azure Marketplace, and GitHub Actions.

Authenticated and continuous scanning are supported, and the service maps to ISO 27001, NIS2, SOC 2, DORA, and CRA work. Premium support with a maximum 48-hour SLA is not part of the Free plan, an important distinction for teams that need a defined response window.

Pricing

Free — free. This includes open-port and service discovery, making it suitable for basic checks and initial evaluation.

NetSec — starting from $95 a month, billed with 5 assets. The price varies by asset count and billing cycle. It adds network scanning, cloud scanning, password auditing, reconnaissance tools, and limited web and API scanning. This is the sensible paid entry point for teams whose primary need is network exposure management; the five-asset starting allowance may be restrictive for larger estates.

WebNetSec — starting from $140 a month, billed with 5 assets. It includes NetSec plus DAST, authenticated web scans, REST and GraphQL API scanning, and CMS scanning. Choose it when web applications matter alongside infrastructure; network-only users pay for capabilities they may not use.

Pentest Suite — starting from $190 a month, billed with 5 assets. It includes WebNetSec, an automated CVE exploiter, SQL-injection and XSS exploiters, and a penetration-test report generator. This tier targets teams that need a broader automated assessment and report workflow, not just port discovery.

The full scanner is available for a seven-day trial. A business email and card are required, and cancelling before day eight avoids a charge. Internal network scanning is an optional add-on, separate from the base plan features.

Platforms

Pentest-Tools Port Scanner runs as a cloud web service and exposes an API. Its deployment model suits distributed teams and automation pipelines, while internal targets use the VPN Agent rather than a purely internet-based scan path.

Who it's for

Security consultants can use the varied scan modes, exports, templates, and report-oriented tiers across client engagements. Internal security teams get scheduled, continuous, and authenticated scanning for recurring exposure checks. Managed security providers benefit from parallel scans, notifications, API access, and integrations. It is less suitable for someone who only wants a free local utility or needs unrestricted internal scanning without an add-on.

Pros and cons

• Pro: Light and full-depth scans balance speed with coverage up to all 65,535 ports.
• Pro: Service and operating-system detection, multiple TCP/UDP methods, and three export formats make results more actionable.
• Pro: Scheduling, parallel execution, templates, API access, and broad integrations support repeatable operations.
• Con: The Free plan's caps are undefined, so workload fit cannot be judged from the plan alone.
• Con: Internal scanning needs the VPN Agent and an optional add-on, adding deployment and cost considerations.
• Con: Paid plans start with five assets, which may force larger environments into higher variable pricing.

Alternatives

For a free Android utility, Port Authority offers an ad-free, open-source app; choose it for simple device-based checks rather than cloud automation. RustScan is a free open-source scanner across Android, Linux, macOS, self-hosted, and Windows, making it preferable when local deployment matters. Naabu is a free MIT-licensed tool for API, Linux, macOS, self-hosted, and Windows environments.

ScanSearch offers internet scanning from $0.30 a month billed per kpps, with unlimited results per scan, full CSV/JSON export, and up to 10 queued scans; it suits narrowly priced high-volume internet scanning. Nmap remains a free option for end users on Linux, macOS, self-hosted, and Windows when you want the underlying scanner without a hosted subscription. NetsCLI is a free MIT-licensed cross-platform option. Sherlock Forensics Port Scanner is another free Linux and Windows alternative. eslint-plugin-jsx-a11y is a static JSX analysis package, not a port-scanning replacement.

For broader category browsing, see Port Scanner Software, Vulnerability Scanning Software, and Network Vulnerability Scanners.

Verdict

Choose Pentest-Tools Port Scanner if you need cloud-based port and service discovery tied to schedules, APIs, exports, and security-team integrations. Its strongest case is repeatable professional scanning with a clear upgrade path into web and penetration-testing features. Look elsewhere if you need a completely free local scanner, predictable unlimited scope, or internal scanning without an additional VPN Agent and add-on.