ScanSearch

ScanSearch is a cloud service for live internet exposure scans, Google dork research, and recurring attack-surface monitoring. It fits security researchers, penetration testers, red and blue teams, bug bounty hunters, and defenders who want these workflows connected to dashboards and automation. Its breadth is appealing, but separate products impose separate quotas, and every scan must be authorized.

Overview

The Internet Scanner performs on-demand live SYN scans and service detection against IP addresses, CIDR ranges, country ranges, ASNs, and resolved domains. Its Nmap-based engine uses more than 12,000 signatures spanning over 1,200 services to identify software, versions, and protocols. Depending on enabled modules, a result can add TLS/SSL information, HTTP security headers, geolocation, technology-stack data, and CVE matches. This makes it more informative than a simple open-port result, although the enrichment you receive depends on the modules enabled.

Results are shown in a live dashboard and can be exported as TXT, JSON, or CSV. Scan data is retained for seven days on free accounts and 90 days on paid accounts; Enterprise retention is agreed separately. ScanSearch says data is accessible only to the account holder and is not sold, rented, or shared except for stated service and legal exceptions. HTTPS, secure password hashing, firewall protection, and regular security audits are cited security measures, and the Internet Scanner page labels the service GDPR compliant.

Key features

Automation and integration

The REST API handles JSON, webhooks, and batch operations, with an official Python SDK and CLI. That is a practical advantage for pipelines, repeated investigations, and teams that do not want to work solely in a browser. Live support is advertised with replies typically arriving within minutes.

Dork Search

Dork Search automates Google dork queries and includes more than 1,000 pre-built queries. Batch processing and TXT, CSV, and JSON exports suit repeatable discovery, but its hourly, page, and result ceilings vary sharply by plan.

Attack Surface Monitoring

Monitoring adds scheduled scans, change tracking, team dashboards, and alerts for newly exposed assets. Business adds webhook notifications and much more frequent scanning; Pro is limited to email alerts and daily scans. These are useful distinctions for deciding whether the service can feed an existing response process.

Pricing

ScanSearch is freemium, with a free plan and a free trial. The pricing note says paid plans start at $30/mo, while individual product prices are as follows.

• Internet Scanner — Free: price not listed, billed monthly. It allows 1 kpps, one scan at a time, up to 1,000 results per scan, exports limited to 100 rows, and no API access. It is suitable for occasional, small checks, not automation.
• Internet Scanner — paid: $0.30 a month, billed per kpps/month for 100–10,000 kpps. It provides unlimited results per scan, full CSV/JSON export, a queue of up to 10 scans, API access, and 90-day retention. The higher throughput and automation fit regular scanning, although the per-kpps billing deserves careful budget checking.
• Internet Scanner — Enterprise: custom pricing. Volume speed discounts, dedicated scan servers, an unlimited queue, scheduled and recurring scans, webhook and SIEM integration, an SLA, and a dedicated account manager target larger operations.
• Dork Search — Free: price not listed, billed monthly. Two searches per hour, three pages per search, 20 results, no batch mode, limited export, and no API access make it a trial tier.
• Dork Search — Pro: $39 a month. It raises capacity to 30 searches per hour, 15 pages and 1,000 results per search, with batches of 10 queries, full CSV/JSON export, and API access.
• Dork Search — Business: $99 a month. At 100 searches per hour, 50 pages, 5,000 results, and 50-query batches, it is the choice for heavier discovery workloads.
• Attack Surface Monitoring — Free: price not listed, billed monthly. One asset, weekly scans, seven days of history, and no alerts or API access are enough for a single low-frequency watch.
• Attack Surface Monitoring — Pro: $49 a month for 25 assets, daily scans, 30 days of history, email alerts, and API access, but no webhooks.
• Attack Surface Monitoring — Business: $149 a month for 100 assets, scans every six hours, 90 days of history, email alerts, webhook notifications, and API access.

Platforms

ScanSearch is cloud-deployed and covers internet targets. Listed platforms are web, Linux, and API, making it a natural fit for browser users and Linux-based automation rather than a conventional desktop scanner.

Who it's for

Choose ScanSearch when you need current exposure data plus service fingerprinting, enrichment, exports, and an API. Security teams benefit most from Monitoring's history and alerts; researchers and bug bounty hunters may value Dork Search and batch operations. It is less suitable for anyone wanting a single, unrestricted desktop tool or unmetered capability on a free tier. Permission to scan every target is mandatory, and the product is positioned for authorized testing, administration, and research.

Pros and cons

• Pros: broad target types and deep signature coverage; optional TLS, header, geolocation, technology, and CVE enrichment; TXT/JSON/CSV exports; Python SDK, CLI, webhooks, and batch API support; monitoring with change history and alerts; stated account-level scan-data privacy and security controls.
• Cons: scanner, dork, and monitoring quotas are separate; free tiers restrict speed, retention, exports, alerts, or API access; Pro monitoring has no webhooks; paid prices range widely and the Internet Scanner's per-kpps billing can be difficult to forecast; authorized-target restrictions rule out casual scanning.

Alternatives

For a directory of port-scanning options, see Port Scanner Software.

• Naabu is a free, MIT-licensed port scanner for Linux, macOS, Windows, self-hosted use, and API workflows; choose it when you want open-source deployment without ScanSearch's hosted product tiers.
• NetsCLI is a free MIT-licensed option for Linux, macOS, and Windows, with a Rust library and MCP server; it suits developers seeking a local, Rust-oriented tool.
• Nmap is free for end users across Linux, macOS, Windows, and self-hosted deployments; pick it for the established open-source scanner rather than a cloud dashboard.
• RustScan is a free open-source port scanner for Android, Linux, macOS, Windows, and self-hosted use.
• Masscan is free software under the GNU Affero General Public License v3 for Linux, macOS, Windows, and self-hosting.
• Unicornscan is free GPL software with API, Linux, and web support alongside self-hosted deployment.
• Angry IP Scanner is a free GPLv2 application for Linux, macOS, and Windows.
• Pentest-Tools Port Scanner offers a free tier and web/API access, with a NetSec plan starting at $95 a month.

Verdict

ScanSearch is a strong choice for authorized security practitioners who want live internet scanning, enrichment, searchable discovery, and scheduled monitoring in one cloud service. Its main reason to choose it is the combination of broad fingerprinting and automation interfaces; its main reason to look elsewhere is the fragmented quotas and paid tiers, especially if a free, self-hosted port scanner is all you need.