Find out what's actually on your network — and what's wrong with it.
A pure-Python network scanner and hardening audit tool. Point it at a network you own and it discovers live hosts and open services, fingerprints them, and produces a prioritised compliance audit with concrete recommendations mapped to CIS Controls v8 and NIST SP 800-53. No external dependencies, no admin rights, no nmap required.
Windows, Linux & macOS · Python 3.10+ · standard library only · MIT licence
One command runs the whole pipeline; the stages are recorded and reusable.
Finds live hosts on a subnet and the services they're exposing, with no admin privileges or extra tooling needed.
Identifies what's actually running behind each open port, not just that a port is open.
assess.py separates evidence-gathering from analysis — re-run the risk model against saved data without re-scanning, or diff datasets between runs over time.
Compares your recent runs into a trend dashboard — a posture grade, an exposure-index chart, and which weaknesses are shrinking or resolved.
Findings come with concrete, prioritised recommendations mapped to CIS Controls v8 and NIST SP 800-53 — not just a raw port list.
A built-in weekly task script keeps the posture overview current automatically, without babysitting it.
netscan is MIT-licensed and lives on GitHub. Clone it and run python assess.py all 192.168.1.0/24 --name home against your own network to see where you stand. Get it on GitHub →