Freedom251 › Vulnerability Scanning Software

OWASP Nettacker

Free plan APILinuxMacSelf-hostedWebWindows

Visit OWASP Nettacker Alternatives Pricing

What OWASP Nettacker is

OWASP Nettacker is a free, open-source tool for automating information gathering, vulnerability scanning, and penetration testing. It can identify open ports, services, misconfigurations, default credentials, and subdomains across IPv4 addresses and ranges, CIDR blocks, domains, and HTTP or HTTPS URLs. Users can run it as a command-line utility, Docker container, API, or Web GUI. Its modular design supports prebuilt and customizable scanning modules, and it generates reports in HTML, TXT, JSON, and CSV formats. The latest release lists SARIF and DefectDojo-compatible reports, and the project supports Maltego transforms. Nettacker is written in Python and does not rely on launching external tools. Installation options include Poetry, pip or pipx, and Docker. Native support covers Linux, macOS, and FreeBSD; Docker is an option on other operating systems, while native Windows support is in progress. The installation guide currently supports Python 3.11–3.12. Security updates cover the latest stable release and current master branch; older versions may not receive updates. The project warns users to obtain permission before testing systems.

Who it suits

Nettacker is intended for cybersecurity professionals and ethical hackers conducting reconnaissance, vulnerability assessments, and network security audits. Users should have authorization from system owners or administrators before targeting systems.

What it does well

Free and open source under Apache License 2.0
Offers CLI, Docker, API, and Web GUI interfaces
Reports in HTML, TXT, JSON, and CSV
Supports Linux, macOS, and FreeBSD natively
Includes customizable scanning modules

What to know first

Native Windows support is still in progress
Current guide supports Python 3.11–3.12
Older versions may not receive security updates

Limits

The documented Python installation supports versions 3.11–3.12; compatibility with later versions is in progress. Native Windows support is also in progress, and the project says older versions may not receive security updates.

Plans

Plan	Billed and limits	Price
OWASP Nettacker	Open-source software · Apache License 2.0	Free

As owasp.github.io lists them, read 4 Oct 2026. The maker's own page has the final word.

Getting started

Open the OWASP Nettacker project website
Choose a source installation with Poetry, a PyPI installation with pip or pipx, or Docker
Use Python 3.11 or 3.12 for the documented installation path
Select a command-line, Docker, API, or Web GUI interface
Obtain permission or consent from the system owner or administrator before scanning

Verdict

Nettacker offers several interfaces, installation paths, and report formats for authorized security assessments. Check its Python and operating-system requirements, and note that older versions may not receive security updates.

Questions

Is OWASP Nettacker free?

Yes. The listed plan is free, and the software is open source under Apache License 2.0.

Which systems does it support?

Native support covers Linux, macOS, and FreeBSD. Docker can be used on other operating systems, and native Windows support is in progress.

What targets can it scan?

Supported targets include IPv4 addresses, IPv4 ranges, IPv4 CIDR blocks, domains, and HTTP or HTTPS URLs. Authenticated scanning is supported.

How can I run it?

It can run as a command-line utility, Docker container, API, or Web GUI. Installation instructions cover Poetry, pip or pipx, and Docker.

What reports and integrations are available?

Reports are available in HTML, TXT, JSON, and CSV formats. The latest release lists SARIF and DefectDojo-compatible reports, and the project supports Maltego transforms.

Who maintains security updates and accepts vulnerability reports?

Security updates cover the latest stable release and current master branch; older versions may not receive updates. The security policy directs vulnerability reports through a private GitHub Security Advisory.

Facts from OWASP Nettacker's own pages

Authorization: The repository warns users to obtain permission or consent from system owners or administrators before targeting systems. · github.com, 4 Oct 2026
Implementation: The project says Nettacker is written entirely in Python and does not rely on launching external tools. · owasp.org, 4 Oct 2026
Install options: Documentation describes installation from source with Poetry, from PyPI with pip or pipx, and with Docker. · nettacker.readthedocs.io, 4 Oct 2026
Integrations: The latest release lists SARIF and DefectDojo-compatible reports, and the project supports Maltego transforms. · owasp.github.io, 4 Oct 2026
Intended users: The project describes its intended users as cybersecurity professionals and ethical hackers conducting reconnaissance, vulnerability assessments, and network security audits. · owasp.org, 4 Oct 2026
Interfaces: Can run as a command-line utility, Docker container, API, or Web GUI. · owasp.org, 4 Oct 2026
Platform support: Natively supports Linux, macOS, and FreeBSD; users of other operating systems can use Docker, and native Windows support is being worked on. · nettacker.readthedocs.io, 4 Oct 2026
Purpose: Automates information gathering, vulnerability scanning, and penetration testing, including discovery of open ports, services, misconfigurations, default credentials, and subdomains. · owasp.org, 4 Oct 2026
Reports: Generates scan reports in HTML, TXT, JSON, and CSV formats. · owasp.org, 4 Oct 2026
Runtime requirement: The installation guide currently supports Python 3.11–3.12 and says compatibility with later Python versions is in progress. · nettacker.readthedocs.io, 4 Oct 2026
Scanning: Its modular architecture supports prebuilt and customizable modules for different scanning tasks. · owasp.org, 4 Oct 2026
Security policy: The project provides security updates for the latest stable release and current master branch, while older versions may not receive updates. · github.com, 4 Oct 2026
Support: The security policy points users to GitHub Issues and the OWASP Slack #project-nettacker channel for general inquiries. · github.com, 4 Oct 2026
Vulnerability reporting: The security policy directs vulnerability reports through a private GitHub Security Advisory and describes a responsible disclosure process. · github.com, 4 Oct 2026

Where OWASP Nettacker stands on Freedom251

Vulnerability Scanning Software#9 of 35