- Home
- Port Scanner Software
- Sherlock Forensics Port Scanner
Sherlock Forensics Port Scanner
Burnaby, British Columbia, Canada
What it is
Sherlock Forensics Port Scanner is a desktop GUI for identifying open TCP ports and the services running behind them. It scans the top 1,000 TCP ports by default, accepts custom port and CIDR ranges, and can cover all 65,535 TCP ports. For open ports, it retrieves service banners that may identify software and version strings, helping users map a host’s attack surface. Scans use TCP connect and complete the three-way handshake; SYN scanning is not available. Results can be exported to CSV with timestamps, host, port, protocol, state, and service identification. Each export includes an Ed25519-signed sidecar with the CSV’s SHA-256, signature, installation-specific public key, and UTC timestamp. The scanner identifies ports and services but does not compare results with CVE databases or attempt exploitation. It runs on Windows and Linux. Windows version 0.1.7 supports 64-bit Windows 10/11 as a standalone executable without installation dependencies or elevated privileges. The Free plan is free, with no trial, feature restrictions, or expiry.
For and against
For
- Scans custom port ranges and CIDR ranges.
- Can scan all 65,535 TCP ports.
- Retrieves banners from open ports.
- CSV exports include signed integrity sidecars.
- Free plan has no expiry or feature restrictions.
Against
- Does not support UDP or SYN scanning.
- Does not support NSE scripting or OS fingerprinting.
- Does not check findings against CVE databases.
- Linux binary requires three listed libraries.
The verdict
Sherlock Forensics Port Scanner focuses on TCP port discovery, service banners, and exportable results rather than vulnerability assessment. Its stated platform support and free plan may suit users with those needs, provided its scanning limitations fit their work.
Who it suits
It suits penetration testers, compliance auditors, and system administrators who need a desktop TCP port scanner. It is also relevant to users who need CSV exports with signed integrity information.
Plans and prices
Free
No trial period · no feature restrictions · no expiry
Read 7 Oct 2026 · sherlockforensics.com
On the record
- Export
- Scan results can be exported to CSV with timestamps, target host, port, protocol, state, and service identification.sherlockforensics.com · read 7 Oct 2026
- Integrity
- CSV exports include an Ed25519-signed sidecar containing the CSV’s SHA-256, signature, per-installation public key, and UTC timestamp.sherlockforensics.com · read 7 Oct 2026
- Intended users
- The maker describes it as a lightweight GUI scanner for penetration testers, compliance auditors, and system administrators.sherlockforensics.com · read 7 Oct 2026
- Limitations
- UDP scanning, SYN scanning, NSE scripting, and OS fingerprinting are not supported.sherlockforensics.com · read 7 Oct 2026
- Linux requirements
- A native Linux x64 binary is available and requires libgtk-3, libfontconfig1, and libxkbcommon.sherlockforensics.com · read 7 Oct 2026
- Maker
- The maker identifies itself as Sherlock Forensics and describes itself as a Vancouver cybersecurity firm with more than 20 years of experience.sherlockforensics.com · read 7 Oct 2026
- Not a vulnerability scanner
- The product identifies ports and services but does not match findings against CVE databases or attempt exploitation.sherlockforensics.com · read 7 Oct 2026
- Ports and targets
- It scans the top 1,000 TCP ports by default, supports custom port ranges and CIDR ranges, and can scan all 65,535 TCP ports.sherlockforensics.com · read 7 Oct 2026
- Purpose
- Sherlock Forensics Port Scanner scans TCP ports, identifies open ports, grabs service banners, and maps target hosts’ attack surfaces.sherlockforensics.com · read 7 Oct 2026
- Scan type
- It performs TCP connect scans using the full three-way handshake and does not support SYN scans.sherlockforensics.com · read 7 Oct 2026
- Service detection
- It grabs service banners from open ports to identify software and version strings.sherlockforensics.com · read 7 Oct 2026
- Support and download
- The download form says email is optional and can be skipped to download directly; providing an email triggers three product introduction emails over two weeks.sherlockforensics.com · read 7 Oct 2026
- Windows requirements
- Version 0.1.7 supports Windows 10/11 64-bit as a single executable with no installation dependencies or elevated-privilege requirement.sherlockforensics.com · read 7 Oct 2026
