Nmap Scanner API provides a simple REST interface to perform TCP port scans against publicly accessible Internet hosts.
It is designed for developers, DevOps engineers and security professionals who occasionally need Nmap results without provisioning a server, installing Nmap or parsing XML output. Simply send an HTTPS request and receive structured JSON containing open ports, detected services, host information and scan statistics.
Typical use cases include:
- Quick infrastructure validation
- One-off security checks
- Attack surface discovery
- External asset inventory
- Firewall verification
- Security troubleshooting
- Compliance verification
- Network reconnaissance
This API is intentionally designed for on-demand, one-off scans where convenience is more important than throughput. If you need recurring monitoring or large-scale scanning, running Nmap locally is likely a better fit.
The service performs standard Nmap TCP Connect (-sT) scans and only reports information already publicly exposed by the target over the Internet. It does not attempt authentication, exploit vulnerabilities, bypass security controls or access private systems.
For security reasons, only publicly routable targets are accepted. Private, loopback, link-local and reserved IP ranges are automatically rejected.