RustScan review
A free, open-source CLI scanner for rapid reconnaissance and Nmap-based analysis.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
RustScan is an open-source command-line port scanner for penetration testers, security researchers, and network administrators. It scans hosts, IP addresses, and CIDR ranges, with support for IPv6, configurable port lists and ranges, file-based targets, UDP scanning, and greppable output containing ports. The published deployment model is CLI-based, with platform coverage for Linux, macOS, Windows through Docker, and Android through Termux.
Its main strength is speed combined with a focused reconnaissance workflow. Adaptive scan tuning can adjust the scan process, while configuration files can define recurring defaults such as addresses, ports, timeouts, and scan order. Once ports are discovered, RustScan can pass them to Nmap for deeper analysis. Nmap integration also provides the documented path for service and OS detection, making the product more useful when a fast port-discovery stage needs to lead into broader analysis. Python, Lua, and Shell scripting add options for customized workflows, and CIDR and file inputs support larger or repeatable target lists.
RustScan is free and open source, with no paid tiers described. That makes it a practical choice for users who want a lightweight scanner that can fit into terminal-driven security workflows without a license cost. It is less suitable for teams seeking a graphical interface or a standalone platform with detection capabilities built directly into the scanner. Windows users should also plan around Docker, while users who need deeper analysis will need Nmap in the workflow. Choose RustScan for rapid, scriptable network reconnaissance and Nmap-assisted follow-up; choose an alternative when native Windows operation, graphical management, or broader built-in scanning features are priorities.
RustScan pros and cons
- Where it wins
- High-speed TCP and UDP scanning with adaptive tuning
- Supports IPv6, CIDR ranges, files, and configurable port lists
- Passes discovered ports to Nmap for deeper analysis
- Where it doesn't
- Command-line deployment requires terminal-based workflows
- Windows use is documented through Docker rather than native support
- Service and OS detection depend on Nmap passthrough
RustScan fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update