What Is Nmap, and How Is It Used?
Nmap (Network Mapper) is the standard tool for network discovery and port scanning. Free and open-source, it finds live hosts, enumerates open ports, fingerprints services and operating systems, and — through its scripting engine — runs deeper checks. Attackers use it for reconnaissance; defenders use it to see their own networks the way an attacker would.
What can Nmap do?#
Its capabilities build from simple to sophisticated:
| Capability | What it finds |
|---|---|
| Host discovery | Which hosts are alive |
| Port scanning | Open/closed/filtered ports |
| Service/version detection | What software listens, and its version |
| OS detection | The likely operating system |
| NSE scripts | Vulnerabilities, extra info, brute force |
A typical assessment moves through these in order: discover hosts, scan their ports, identify the
services and versions, then check those versions against known vulnerabilities — often with an
NSE vuln script.
Why is Nmap essential for defenders?#
Because you cannot secure what you have not inventoried. Running Nmap against your own ranges reveals forgotten services, unexpected open ports, and outdated software — the same attack surface an attacker would map first. Regular self-scanning turns reconnaissance from the attacker’s advantage into yours.
Nmap is the workhorse of network reconnaissance. More at the Network Security hub.
Frequently asked questions#
What is Nmap used for?
Nmap (Network Mapper) is a free, open-source tool for network discovery and security auditing. It finds live hosts, scans for open ports, detects service versions and operating systems, and runs scripted checks via the Nmap Scripting Engine. It is the de facto standard for both attackers doing reconnaissance and defenders auditing their own networks.
What is the Nmap Scripting Engine?
The Nmap Scripting Engine (NSE) lets Nmap run scripts that go beyond basic scanning — detecting specific vulnerabilities, brute-forcing logins, gathering extra information, and more. Scripts are grouped into categories like default, safe, and vuln, extending Nmap from a port scanner into a broader assessment tool.