| Free | |License |
 |  | limited slow queue scans |
| | unlimited priority-queue full scans |
| | Vulnerability score reported |
| | Warnings and recommendations |
| | Scan history kept |
| Port scan features |
| | TCP full scan over ports 1-1024 and 1062 common ports |
| | optional TCP 'stealth' scan |
| | optional fragmented packet TCP scan |
| | UDP scan over ports 1-1024 including 956 common UDP ports |
| OS Identification and TCP signature |
| | nmap OS fingerprint guess |
| | queso OS fingerprint guess |
| | TCP sequence number difficulty rating |
| Windows-specific checks |
| | Netbios machine/user name scan |
| | Netbios open disk/guest access check |
| Services probed |
| | finger server check |
| | FTP server check |
| | dump of any port greeting lines found |
| | 45 common web server vulnerability checks |
| | SMTP server open-relay check |
| | Web server requests-per-second benchmark |
| Denial of service testing |
| | Syn-flood on demand |
| | bonk,jolt,land,nestea,newtear |
| | syndrop,teardrop,winnuke,sping,fawx,cod |
