Question 1

Can I scan any IP address or hostname?

Accepted Answer

You can scan any publicly routable Internet host. Private, loopback, link-local and reserved IP ranges are automatically rejected.

The API performs standard Nmap TCP Connect (-sT) scans against services reachable from the public Internet. It does not attempt authentication, exploit vulnerabilities or bypass security controls.

You are responsible for ensuring that your use of the API complies with applicable laws and that you have any authorization required to scan the target.

Question 2

Why use this API instead of running Nmap myself?

Accepted Answer

This API is designed for situations where you need Nmap results without maintaining scanning infrastructure.

A single HTTPS request gives you structured JSON containing open ports, detected services, host information and scan statistics — with no server to provision, Nmap installation to maintain or XML output to parse.

For recurring monitoring or high-volume scanning, running Nmap on your own infrastructure will generally be more appropriate. This API is optimized for convenient, on-demand scans.

nmap

Frequently Asked Questions