ScanSearch

ScanSearch is a cloud platform for live internet exposure scans, Google dork searches, and recurring attack-surface monitoring. It fits security researchers, penetration testers, red and blue teams, bug bounty hunters, and defenders who need current results plus automation. Its broad toolkit is useful, but separate products carry separate quotas and costs, and every scan must be authorized.

Overview

The Internet Scanner performs on-demand SYN scans and service detection against IP addresses, CIDR ranges, country ranges, ASNs, and resolved domains. Its Nmap-based engine uses more than 12,000 signatures covering over 1,200 services, identifying software, versions, and protocols rather than merely reporting open ports. Optional modules can add TLS/SSL information, HTTP security headers, geolocation, technology-stack data, and CVE matches.

A live dashboard displays results, with TXT, JSON, and CSV exports. ScanSearch is cloud-deployed for internet-wide scope and lists web, Linux, and API access. The service requires permission for every target and is positioned for authorized security testing, network administration, and research. Its privacy policy says scan data is accessible only to the account holder, protected with HTTPS, secure password hashing, firewall controls, and regular security audits. Free-account data is retained for seven days, paid-account data for 90 days, and Enterprise retention is agreed separately.

Key features

Scanning and enrichment

The combination of broad target types and detailed service fingerprints suits exposure inventory and investigation work where knowing the product and protocol matters. Enrichment is conditional on enabled modules, so a basic scan will not necessarily include every security or technology field.

Search, automation, and monitoring

Dork Search automates Google dork queries with more than 1,000 pre-built queries, batch processing, and TXT, CSV, or JSON output. Attack Surface Monitoring adds scheduled scans, change tracking, team dashboards, and email or webhook alerts for new exposures. These are useful complements to one-off scans, but their quotas and histories vary sharply by plan.

API and support

The REST API supports JSON, webhooks, and batch operations, with an official Python SDK and CLI. Live support is advertised with replies typically arriving within minutes. The GDPR-compliant label on the Internet Scanner page and the stated privacy controls will matter to teams handling sensitive exposure data.

Pricing

ScanSearch is freemium, with paid plans from $30/mo in its pricing note, alongside product-specific prices below. A free trial is offered.

Internet Scanner

The Free plan has no listed price and allows 1 kpps, one concurrent scan, up to 1,000 results per scan, exports limited to 100 rows, and no API access. The paid plan is $0.30 a month, billed per kpps/month for 100–10,000 kpps; it adds unlimited results per scan, full CSV/JSON export, a queue of up to 10 scans, API access, and 90-day retention. Enterprise uses custom pricing and adds volume speed discounts, dedicated scan servers, an unlimited queue, scheduled and recurring scans, webhook and SIEM integration, an SLA, and a dedicated account manager. The free tier is suitable for small checks; high-volume or recurring operations need paid capacity.

Dork Search

Free has no listed price and is limited to two searches per hour, three pages per search, 20 results, no batch mode, limited export, and no API. Pro costs $39 a month for 30 searches per hour, 15 pages, 1,000 results, batches of 10 queries, full CSV/JSON export, and API access. Business costs $99 a month and raises those limits to 100 searches per hour, 50 pages, 5,000 results, and batches of 50 queries. Pro fits regular individual research; Business is for heavier collection.

Attack Surface Monitoring

Free has no listed price and covers one asset with weekly scans, seven days of history, and no email, webhook, or API access. Pro is $49 a month for 25 assets, daily scans, 30 days of history, email alerts, no webhooks, and API access. Business is $149 a month for 100 assets, scans every six hours, 90 days of history, email and webhook alerts, and API access. Pro suits smaller teams; Business is the practical choice for larger inventories and integrations.

Platforms

ScanSearch is delivered through the cloud and lists web, Linux, and API platforms. Its Python SDK and CLI support programmatic workflows.

Who it's for

Choose ScanSearch if you are a security researcher, penetration tester, red or blue team, bug bounty hunter, defender, or administrator authorized to inspect internet targets. It is especially suitable when live exposure data, service identification, dork-based discovery, and scheduled monitoring belong in one account. It is a poorer fit for casual port checks, offline-only work, or anyone who cannot verify authorization for targets.

Pros and cons

• Pros: Service detection spans more than 1,200 services and 12,000 signatures, giving exposure results useful context.
• Pros: Scanner, dork-search, and monitoring workflows share API access and practical export formats on qualifying plans.
• Pros: Monitoring offers scheduled scans, change tracking, and alerting, with webhook support on Business.
• Cons: Free tiers impose strict scan, result, export, asset, history, and API limits.
• Cons: Product pricing and quotas are fragmented; webhook alerts and deeper histories require higher monitoring tiers.
• Cons: Internet scanning is restricted to authorized targets, so it is unsuitable for unapproved reconnaissance.

Alternatives

For a free, MIT-licensed scanner that runs across Linux, macOS, Windows, self-hosted environments, and an API, consider Naabu. NetsCLI is a free MIT-licensed option for Linux, macOS, and Windows, with its Rust library and MCP server published on crates.io. RustScan is a free open-source port scanner supporting Android, Linux, macOS, Windows, and self-hosting. Angry IP Scanner is free and GPLv2-licensed for Linux, macOS, and Windows. Masscan is free AGPLv3 software for Linux, macOS, Windows, and self-hosted use. Nmap is free for end users, offers a free trial, and supports Linux, macOS, Windows, and self-hosting, with redistribution restrictions for commercial products. Unicornscan is free GPL software with API, Linux, macOS, self-hosted, and web support. Pentest-Tools Port Scanner offers a free tier for open-port and service discovery, plus a NetSec plan starting from $95/month.

Verdict

ScanSearch is a strong choice for authorized security teams that want live internet scanning, detailed service identification, dork search, and recurring monitoring in one cloud service. Its main reason to look elsewhere is the fragmented limits and paid upgrades: free users quickly encounter caps, while teams needing broad monitoring, webhooks, or high-volume scans must budget for the appropriate product tier.