Methodology

The yardstick

Feature lists are easy to compare and mostly beside the point. The person we write for does not need the scanner with the most options; they need the one that turns an unfamiliar network into an accurate, labelled list with the fewest wrong turns. So every tool is judged against the same question: starting cold from the vendor’s own site, with no prior experience of the product, how long would it plausibly take a newcomer to reach a device list they would be willing to file as an inventory — and where do people who have actually run it say they got stuck? We work through each vendor’s public demo or free trial where one exists, read the documentation a first-time user would read, and set that against what the finished list is reported to get right and wrong elsewhere.

How we build ground truth

We do not claim a network of our own to test against. Instead we build ground truth from what is independently checkable: a vendor’s documented detection methods — whether it reads the ARP table, tries mDNS, falls back to a TCP probe when ICMP is blocked — set against what administrators report finding when they run the same scan against a similarly mixed estate of a NAS, a couple of printers, phones and smart-home gear that quietly ignores ping. A vendor’s own release notes or a support thread mentioning a detection gap carries more weight with us than a marketing claim, because it is not the kind of admission a vendor volunteers unless it is true.

Port and service scanners get a second question: how clearly a result explains an open service nobody meant to leave running. We look at what the vendor’s documentation says the tool identifies beyond a bare port number, and at how forum and support-thread reports describe that identification in practice — whether a listed “port 8009 open” actually gets named for what it is, or is left for the reader to look up.

The six criteria

1. Completeness. How many of the known devices it finds on a default run, and how many more with the settings a newcomer could reasonably discover.
2. Labelling. Whether results carry hostnames, MAC vendors, service names and device types, or just bare addresses.
3. Time to a trustworthy list. Minutes from opening the vendor’s page to a list a first-time user would file, including getting the tool.
4. Getting results out. Export formats, column control and whether a second scan can be compared with the first.
5. Platform and licence clarity. Which systems it runs on, what the licence allows at work, and whether the pricing model is stated plainly by the vendor.
6. Safe acquisition. Whether the vendor distributes signed files or publishes checksums, and whether its official site is easy to tell apart from look-alikes.

We do not publish numeric scores. Two tools with the same total can suit completely different people, and a single number hides that. Instead, each review says plainly where the tool is strong, where it falls short and who should skip it.

How ordering works on comparison pages

Tables on our category pages are ordered by the yardstick above for that category’s main job — for example, how readable the per-host service list is on the port scanner sheet. Order is never sold. Vendor links on this site are plain links to each vendor’s official website and earn us nothing (see ouraffiliate disclosure).

Authorization

Working through a vendor’s demo or free trial happens on infrastructure we control, never as an unannounced scan of somebody else’s network. Every walkthrough on this site assumes the same of you: a network you own or administer, or written permission from whoever does. We do not describe techniques for getting into networks, avoiding detection or reading other people’s traffic.

Keeping pages current

Each review, comparison and walkthrough shows the date it was last checked. We recheck licence terms and supported platforms against the vendor’s own site whenever we update a page, and we act on corrections sent toeditor@scanlanmax.biz. Prices are described as a model (per device, per tier, free with paid upgrades) unless we have confirmed a figure on the vendor’s pricing page at the time of writing.

Read more about who runs Scanlanmax, or go straight to the IP scanner comparison.