TCP
Port scanning
Sweeps the ports that matter and tells you what is actually listening, not what should be.
reconYa sweeps your subnet, fingerprints what answers, and keeps a live map of it, so the thing that appeared on your LAN at 3am doesn't stay a mystery until morning.
Free for personal and homelab use. Businesses need a licence.
Seven jobs, done properly. No agents to install on anything, no cloud account, no telemetry phoning home.
Sweeps the ports that matter and tells you what is actually listening, not what should be.
Ping sweeps the range to find every box that is awake, including the ones nobody documented.
Watches ARP chatter between scans, so a device that joins quietly still gets caught.
Guesses the OS from how a host answers and resolves the MAC to a vendor. Printer or intruder: usually clear.
The whole subnet as a grid. Occupied cells light up, gaps stay dark. Your LAN at a glance.
Every sweep, every appearance, every disappearance, timestamped, so you can answer "when did that show up?"
One network, several subnets. List the CIDR blocks you actually use and scan them on their own schedule, not a covering supernet nobody asked for.
Three moves from install to a live map.
Give it a subnet. It pre-fills the one you are on. No inventory file to write first.
Ping sweep, then port scans and fingerprinting on whatever answers. ARP watching runs alongside.
The map and device grid populate live while the event log narrates. Nothing to refresh.
Paste one line. Be scanning before the kettle boils.
curl -sL https://raw.githubusercontent.com/Dyneteq/reconya/master/install.sh | sh
Detects your OS and architecture, then drops the right build in place. Linux (x86_64, ARM64) and macOS (Intel, Apple Silicon).
If reconYa runs on a network someone is being paid to look after, that is a commercial licence. Everything else stays free.
Homelab, flat, side project. Non-commercial use under CC BY-NC 4.0, with every feature and no device cap.
Covers every employee, every host and every subnet you run it on. Consultancies and MSPs included: scan your clients under the same licence.
On networks you own or administer, yes. Pointed at someone else’s, scanning ranges from rude to prosecutable depending on where you live. Scan your own kit.
ARP requests and ICMP echoes need raw sockets, and raw sockets need privileges. Nothing else in reconYa asks for them.
nmap is a scalpel you run when you have a question. reconYa is the thing that keeps watching so you know a question exists: persistent inventory, a live map and a timeline, rather than one-shot output.
No. It runs on your box, stores results on your box, and has nothing to phone home to. No accounts, no telemetry.
Not yet. Container support is being researched, but scanning from inside a container needs host networking to reach the LAN, and that is not fully solved. Run the binary on the host for now.
Linux on x86_64 and ARM64, and macOS on both Intel and Apple Silicon. A Raspberry Pi is a perfectly good permanent home for it.
Two ways: define multiple target networks and scan them in turn, or give one network several CIDR ranges (two floors that don't share a supernet, say) and it sweeps each in turn and merges the results into one inventory. Either way, the host it runs on has to actually route to each range.
Yes, free, open-source, and non-commercially licensed. Sponsorship is welcome and buys nothing but faster fixes and more coffee.
Free, open-source, and maintained on evenings and coffee. A star costs nothing; the rest keeps the coffee coming.