Nmap

Overview

Nmap is a network-mapping and security-auditing utility for administrators and security practitioners who need to find hosts and examine the services they expose. Its strength is flexible discovery and scanning, with scripts and companion tools extending that core; it is not a complete vulnerability-scanning solution.

Dating to 1997, Nmap supports routine network administration as well as security work, including inventory, service-upgrade planning, and uptime monitoring. Its broad scanning options reward users who can interpret network results, but raw-packet privileges required by most scan types can constrain where it can run.

Key features

Discovery and scanning

Nmap uses raw IP packets to identify available hosts, services and versions, operating systems, and packet filters or firewalls. TCP and UDP port scans, ping sweeps, and OS and version detection make it useful for mapping what is reachable and what is running. That breadth suits network operators and security practitioners; it does not remove the need to assess what scan results mean.

Most port scan types require privileged access to send and receive raw packets. Unprivileged users can use connect and FTP bounce scans, but have fewer scan choices. That trade-off matters in restricted environments or for users who cannot obtain the necessary permissions.

Scripts and companion utilities

The Nmap Scripting Engine runs bundled or user-written scripts in parallel to automate networking tasks, including discovery and vulnerability checks. It adds flexibility for repeatable or specialized work, but the project cautions that Nmap is not a comprehensive vulnerability scanner. Teams needing full vulnerability-scanning coverage should not treat NSE as a substitute.

The suite also includes Zenmap, a graphical interface and results viewer; Ncat for data transfer and debugging; Ndiff for comparing scan results; and Nping for generating packets and analyzing responses. Together, these tools cover related network tasks without changing Nmap's central role as a mapper and scanner.

Integration and trust

For OEM integration, the project recommends running Nmap and parsing its XML output, while allowing other approaches such as parsing normal output or processing its data files. Source code is provided for inspection and security auditing. That openness can help teams assess the software, while commercial redistribution in a product requires a separate OEM license.

Pricing

Nmap is free for end users under the free end-user license, which does not permit redistribution inside commercial software or hardware products. The free version has no warranty and relies on community support.

Organizations embedding Nmap in products need an OEM redistribution license. Quarterly licenses include maintenance and cover all company products for small/startup and mid-sized companies, while the enterprise quarterly option covers redistribution in a product line or category:

• Small/Startup Company quarterly: $9,980 a month, billed $9,980 per 3 months. For eligible small/startup companies; includes maintenance and covers all company products.
• Mid-Sized Company quarterly: $13,980 a month, billed $13,980 every 3 months. For eligible mid-sized companies; includes maintenance and covers all company products.
• Enterprise quarterly: $17,980 a month, billed $17,980 every 3 months. Covers redistribution in a product line or category and includes maintenance.

Perpetual licenses require a larger one-time outlay, with annual maintenance optional. Small/startup eligibility is limited to companies with 50 or fewer employees and no more than US$10 million in revenue; the mid-sized category allows up to 500 employees, revenue under US$200 million, and, for publicly traded companies, market capitalization under $1 billion.

• Small/Startup Company perpetual: $59,980, paid once, billed US$59,980 one-time; optional annual maintenance US$17,980. Covers all company products.
• Mid-Sized Company perpetual: $89,980, paid once, billed $89,980 one-time; optional annual maintenance $22,980. Covers all company products.
• Enterprise perpetual: $119,980, paid once, billed $119,980 one-time; optional annual maintenance $29,980. Covers redistribution in a product line or category, with no per-seat royalties.

Perpetual OEM licenses can be canceled for a full refund within six months; quarterly term licenses can be ended for a full refund within their first 30 days. Active OEM maintenance subscriptions include commercial technical support. These OEM plans are for companies redistributing Nmap, not a paid upgrade needed for ordinary end-user use.

Platforms

Nmap supports Windows, macOS, Linux, FreeBSD, OpenBSD, NetBSD, Solaris, Amiga, and HP-UX. It is available for desktop deployment and also supports self-hosted use. Its command-line interface suits users comfortable working directly with scans, while Zenmap provides a graphical interface and results viewer.

Who it's for

Nmap is a strong fit for network administrators who need to inventory hosts and services, plan upgrades, or monitor uptime, and for security practitioners who need configurable discovery and scanning. Its scripts and companion utilities broaden its use for technically capable teams. It is a poorer fit for people seeking a turnkey, comprehensive vulnerability scanner or those unable to obtain raw-packet privileges for the scan types they need.

Companies embedding Nmap in commercial products should consider the OEM licenses and their company-size and redistribution-scope terms before adopting it. End users can use the free license without paying, but cannot redistribute it within commercial products.

Pros and cons

• Pro: TCP and UDP scanning, ping sweeps, and OS and version detection support detailed network discovery and inventory.
• Pro: NSE scripts and four companion tools extend the suite to automation, result comparison, packet analysis, and data transfer.
• Pro: Free end-user use and inspectable source code suit users who want an open utility they can audit.
• Con: Most port scan types need privileged raw-packet access, limiting options for unprivileged users.
• Con: Nmap is not a comprehensive vulnerability scanner, so users needing that coverage should choose a dedicated alternative.
• Con: Commercial redistribution requires an OEM license, and the perpetual enterprise license is a substantial one-time commitment.
• Con: The free version has no warranty and community support, which may not suit organizations requiring commercial technical support.

Alternatives

For a broader look at options, browse Port Scanner Software, Network Diagnostic Software, or Vulnerability Scanning Software.

• Intruder is an alternative with a freemium model, free plan, and free trial.
• ManageEngine Vulnerability Manager Plus has a freemium model, free plan, and free trial.
• NSAuditor AI offers a free Community plan with 27 scanner plugins and a Pro annual plan at $39 a year, billed as $470/yr. Consider it when a defined plugin set and annual plan suit your needs.
• NSAuditor AI has a free Community plan with 27 scanner plugins; its maker says it has provided network security and recovery software since 2004.
• Nuclei is a free, MIT-licensed CLI tool intended primarily as a standalone utility; consider it when that model fits better than Nmap's broader suite.
• OpenVAS has a free virtual-appliance edition with a community feed, limited enterprise features, and no default support, as well as a freemium model and free trial.
• OWASP Nettacker is free, open-source software under Apache License 2.0.
• Qualys External Attack Surface Management offers a 30-day no-cost CSAM with EASM plan and a free trial.

Verdict

Choose Nmap if you need a free, scriptable tool for mapping networks, inspecting ports and services, and supporting administration or security workflows. Its breadth and companion tools are the main reasons to choose it; the need for raw-packet privileges, lack of a warranty in the free version, and limits as a vulnerability scanner are reasons to look elsewhere when those needs dominate.