FREEDOM251

Freedom251 › Port Scanner Software

Sherlock Forensics Port Scanner

Free plan LinuxWindows

Visit Sherlock Forensics Port Scanner Alternatives Pricing

Sherlock Forensics Port Scanner's own site

What Sherlock Forensics Port Scanner is

Sherlock Forensics Port Scanner is a free desktop GUI tool for finding open TCP ports and identifying services on target hosts. It scans the top 1,000 TCP ports by default, accepts custom port ranges and CIDR ranges, and can scan all 65,535 TCP ports. For open ports, it retrieves service banners that may identify software and version strings. The scanner uses TCP connect scans, completing the full three-way handshake; it does not support SYN scans. Results can be exported to CSV with timestamps, target host, port, protocol, state, and service identification. Each CSV export includes an Ed25519-signed sidecar with the CSV's SHA-256, signature, per-installation public key, and UTC timestamp. The tool identifies ports and services, but does not check findings against CVE databases or attempt exploitation. It runs on Windows and Linux. Version 0.1.7 supports 64-bit Windows 10/11 as a single executable without installation dependencies or elevated privileges. The native Linux x64 binary requires libgtk-3, libfontconfig1, and libxkbcommon. The free plan costs nothing, with no trial period, feature restrictions, or expiry.

Who it suits

The maker describes the scanner for penetration testers, compliance auditors, and system administrators who need to map TCP ports and services. It is available for Linux and Windows.

What it does well

  • Scans custom port and CIDR ranges
  • Can scan all 65,535 TCP ports
  • Exports CSV with signed integrity sidecar
  • Free plan has no expiry or feature restrictions

What to know first

  • TCP connect scans only; no SYN scans
  • Does not check CVEs or attempt exploitation
  • No UDP scanning or OS fingerprinting
  • Linux binary requires three listed libraries

Limits

The free plan has no feature restrictions or expiry. The scanner is limited to TCP connect scans and does not support UDP scanning, SYN scans, NSE scripting, OS fingerprinting, CVE matching, or exploitation.

Plans

PlanBilled and limitsPrice
FreeNo trial period · no feature restrictions · no expiryFree

As sherlockforensics.com lists them, read 7 Oct 2026. The maker's own page has the final word.

Getting started

  1. Open the Sherlock Forensics website.
  2. Choose the Windows or Linux download for your system.
  3. On Windows, run the version 0.1.7 executable on 64-bit Windows 10 or 11.
  4. On Linux, ensure libgtk-3, libfontconfig1, and libxkbcommon are available.
  5. Use the download form to provide an email or skip it and download directly.

Verdict

This tool maps TCP ports and identifies services, with CSV exports that include a signed integrity sidecar. It is not a vulnerability scanner, and its supported scan methods exclude UDP and SYN scanning.

Questions

How much does Sherlock Forensics Port Scanner cost?

The Free plan costs nothing and has no expiry or feature restrictions.

Is there a free trial?

There is no trial period; the free plan is available without an expiry.

Which platforms does it support?

It supports Windows and Linux. Version 0.1.7 runs on 64-bit Windows 10 and 11, and a native Linux x64 binary is available.

Does it scan for vulnerabilities?

No. It identifies ports and services but does not check findings against CVE databases or attempt exploitation.

Can I download it without giving my email?

Yes. The download form allows the email field to be skipped. Providing an email triggers three product introduction emails over two weeks.

Facts from Sherlock Forensics Port Scanner's own pages

Export
Scan results can be exported to CSV with timestamps, target host, port, protocol, state, and service identification. · sherlockforensics.com, 7 Oct 2026
Founded
2006 · sherlockforensics.com, 28 Sept 2026
Headquarters
Burnaby, British Columbia, Canada · sherlockforensics.com, 28 Sept 2026
Integrity
CSV exports include an Ed25519-signed sidecar containing the CSV’s SHA-256, signature, per-installation public key, and UTC timestamp. · sherlockforensics.com, 7 Oct 2026
Intended users
The maker describes it as a lightweight GUI scanner for penetration testers, compliance auditors, and system administrators. · sherlockforensics.com, 7 Oct 2026
Limitations
UDP scanning, SYN scanning, NSE scripting, and OS fingerprinting are not supported. · sherlockforensics.com, 7 Oct 2026
Linux requirements
A native Linux x64 binary is available and requires libgtk-3, libfontconfig1, and libxkbcommon. · sherlockforensics.com, 7 Oct 2026
Maker
The maker identifies itself as Sherlock Forensics and describes itself as a Vancouver cybersecurity firm with more than 20 years of experience. · sherlockforensics.com, 7 Oct 2026
Not a vulnerability scanner
The product identifies ports and services but does not match findings against CVE databases or attempt exploitation. · sherlockforensics.com, 7 Oct 2026
Ports and targets
It scans the top 1,000 TCP ports by default, supports custom port ranges and CIDR ranges, and can scan all 65,535 TCP ports. · sherlockforensics.com, 7 Oct 2026
Purpose
Sherlock Forensics Port Scanner scans TCP ports, identifies open ports, grabs service banners, and maps target hosts’ attack surfaces. · sherlockforensics.com, 7 Oct 2026
Scan type
It performs TCP connect scans using the full three-way handshake and does not support SYN scans. · sherlockforensics.com, 7 Oct 2026
Service detection
It grabs service banners from open ports to identify software and version strings. · sherlockforensics.com, 7 Oct 2026
Support and download
The download form says email is optional and can be skipped to download directly; providing an email triggers three product introduction emails over two weeks. · sherlockforensics.com, 7 Oct 2026
Windows requirements
Version 0.1.7 supports Windows 10/11 64-bit as a single executable with no installation dependencies or elevated-privilege requirement. · sherlockforensics.com, 7 Oct 2026

Where Sherlock Forensics Port Scanner stands on Freedom251

Look at these too