TCP
Port scanning
Sweeps the ports that matter and tells you what is actually listening, not what should be.
reconYa sweeps your subnet, fingerprints what answers, and keeps a live map of it on your Mac, so the thing that appeared on your LAN at 3am doesn't stay a mystery until morning.
Seven jobs, done properly. No agents to install on anything, no cloud account, no telemetry phoning home.
Sweeps the ports that matter and tells you what is actually listening, not what should be.
Ping sweeps the range to find every box that is awake, including the ones nobody documented.
Watches ARP chatter between scans, so a device that joins quietly still gets caught.
Guesses the OS from how a host answers and resolves the MAC to a vendor. Printer or intruder: usually clear.
The whole subnet as a grid. Occupied cells light up, gaps stay dark. Your LAN at a glance.
Every sweep, every appearance, every disappearance, timestamped, so you can answer "when did that show up?"
One network, several subnets. List the CIDR blocks you actually use and scan them on their own schedule, not a covering supernet nobody asked for.
Three moves from install to a live map.
Give it a subnet. It pre-fills the one you are on. No inventory file to write first.
Ping sweep, then port scans and fingerprinting on whatever answers. ARP watching runs alongside.
The map and device grid populate live while the event log narrates. Nothing to refresh.
Download the Mac app, drag it to Applications, hit scan. Every feature is unlocked for 14 days. No account, no card, no key to paste until you decide to keep it.
Universal build for Apple Silicon and Intel. macOS 13 Ventura or later. About 20 MB, no installer, no background agents.
One price, paid once. Your licence never expires; it covers every release published in the year after you buy, and the version you have keeps working after that.
More than a handful of Macs, or scanning client networks for a living? Ask for volume pricing and a single invoice.
The native macOS app, licensed to you. Every feature, no device cap, no subscription. Verified offline on your Mac: it never contacts a licence server.
Not sure yet? Start the 14-day trial first. The licence unlocks the copy you already have.
On networks you own or administer, yes. Pointed at someone else’s, scanning ranges from rude to prosecutable depending on where you live. Scan your own kit.
ARP requests and ICMP echoes need raw sockets, and raw sockets need privileges. Nothing else in reconYa asks for them.
nmap is a scalpel you run when you have a question. reconYa is the thing that keeps watching so you know a question exists: persistent inventory, a live map and a timeline, rather than one-shot output.
No. It runs on your box, stores results on your box, and has nothing to phone home to. No accounts, no telemetry.
Not yet. Container support is being researched, but scanning from inside a container needs host networking to reach the LAN, and that is not fully solved. Run the binary on the host for now.
The app is macOS 13 or later, a universal build for Apple Silicon and Intel. The scanning engine underneath is open source and also builds on Linux, if you would rather run it on a Raspberry Pi and do without the Mac console; see the bottom of this page.
Two ways: define multiple target networks and scan them in turn, or give one network several CIDR ranges (two floors that don't share a supernet, say) and it sweeps each in turn and merges the results into one inventory. Either way, the host it runs on has to actually route to each range.
A perpetual licence for reconYa for macOS on one Mac, plus every release published in the 12 months after purchase. When that year is over the app keeps working on the last version you installed. If you want newer releases after that, renew for another year; if not, nothing changes.
No account. You receive a signed licence block by email, paste it into the app once, and it is verified on your Mac against a key built into reconYa. The app never contacts a licence server, which is also why it works on an isolated network.
Fourteen days, every feature, no card. When it ends the console locks until you enter a licence, but scans keep running in the background and nothing is deleted, so buying later picks up exactly where you left off.
The engine is: the code is on GitHub under CC BY-NC 4.0, so you can read every line that touches your network and build it yourself for non-commercial use. The paid app is that engine packaged, signed and supported as a Mac application, and it is how the project pays for itself.
The scanning engine behind the app is public under CC BY-NC 4.0. Read the code, build it for Linux or macOS, file issues. The paid app is the same engine, packaged and supported; buying it is what keeps the repository maintained.