# projectdiscovery/naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Repository: https://github.com/projectdiscovery/naabu
Canonical: https://ross.abutalabs.com/products/naabu
Homepage: https://projectdiscovery.io
Language: Go
License: MIT
License Family: permissive
Topics: portscanner, port-enumeration, scan-ports, nmap, cdn-exclusion, hacktoberfest
Last push: 2026-08-24T13:46:42+00:00

## Health v2 (maintenance only)
Score: 89/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 99, release rhythm 70, longevity 100
- inputs: {"age_days": 2416, "days_push": 9, "days_rel": 120, "gap_med": 47, "n_releases_24m": 10}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 6205, forks 715 (observed 2026-08-28T04:09:39.949175+00:00)

## What it is
Naabu is a fast, lightweight port scanner written in Go that performs SYN, CONNECT, and UDP scans to enumerate open ports on hosts. It is designed to integrate with other ProjectDiscovery tools for attack surface discovery in bug bounty and penetration testing workflows.

## Use cases
- scan a list of hosts for open ports quickly
- enumerate open ports for attack surface discovery in bug bounties
- run fast SYN or CONNECT scans instead of nmap
- discover open UDP ports on target hosts
- pipe port scan results into other recon tools
- exclude CDN and WAF IPs from port scans
- integrate with nmap for service version discovery

## When to choose
- you need a fast, simple, resource-light port scanner for large host lists
- you want to chain port scanning into an automated recon pipeline
- you need SYN, CONNECT, and UDP scanning with JSON output
- you want nmap integration for follow-up service discovery

## When to avoid
- you need deep service fingerprinting or vulnerability detection rather than port enumeration
- you require a GUI-driven scanning experience
- you need stealth features like decoy scanning or fragmentation offered by nmap

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, networking, cli, developer-tools
- domain: security, penetration-testing, networking, developer-tools
- platform: windows, go, cli, cross-platform
- tags: port-scanner, reconnaissance, syn-scan, udp-scan, nmap-integration, bug-bounty, attack-surface-discovery, cdn-exclusion, command-line, linux, macos

## Member repositories
- projectdiscovery/naabu (main) score 89

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:39.949175+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:47:18.760648+00:00, confidence not recorded.
  - readme: https://github.com/projectdiscovery/naabu (fetched 2026-08-28T04:09:39.949175+00:00, sha e624fdc5b931)
  - homepage: https://projectdiscovery.io (fetched 2026-08-29T08:43:45.890400+00:00, sha 4f86254fd766)
  - site_page: https://docs.neo.projectdiscovery.io/ (fetched 2026-08-29T08:43:45.901384+00:00, sha de87e1036abb)
  - site_page: https://docs.neo.projectdiscovery.io/use-cases/attack-surface-monitoring (fetched 2026-08-29T08:43:45.903230+00:00, sha e2b7027938c7)
  - site_page: https://projectdiscovery.io/pricing (fetched 2026-08-29T08:43:45.899496+00:00, sha 155f9d3a4107)
- Data as of 2026-08-30T08:39:29.467469+00:00.