Good, fast, cheap: pick two. That is the rule. IP Recon was built to break it.
Most network scanners hand you addresses and leave the hard part to you. IP Recon hands you devices: a Mac Studio, a Proxmox host and the containers it runs, the HP printer nobody admits to owning, a phone on the guest VLAN that should not be there.
One purchase covers Mac, iPhone and iPad.
WHAT IT RECOGNIZES
Network gear from Cisco, Juniper, MikroTik, Palo Alto, Fortinet, Aruba, TP-Link Omada and Ubiquiti UniFi, and the ISP gateways handed out by AT&T, Xfinity, Spectrum, Verizon, Cox, Bell and Rogers.
Operating systems down to the version: Windows 10 and 11 by build, Windows Server, macOS, iOS, the major Linux distributions and the BSDs. Hypervisors and storage: VMware ESXi, Proxmox VE, Synology DSM, QNAP QTS, TrueNAS, Unraid, each virtual machine named by the hypervisor that runs it. Firewalls and routers: pfSense, OPNsense, OpenWrt, DD-WRT.
The Apple and Microsoft ecosystems by product. Around the house: Echo, Nest, Sonos, Denon, Yamaha, Roku, Fire TV, eero, Orbi, robot vacuums, thermostats, solar inverters and batteries, EV chargers, the car in the garage and its dashcam, 3D printers, doorbells, cameras and locks. Over 1,300 rules.
And the software on them, by name and version: Home Assistant, Plex, Vaultwarden, Immich, Zigbee2MQTT, Proxmox Backup Server, Pi-hole. A bare Linux box becomes the thing it is actually doing.
Where the network cannot say, IP Recon leaves the field blank. Every device shows the evidence behind its identification, so a confident answer is distinguishable from a guess.
YOUR CONTROLLERS, READ DIRECTLY
Connect UniFi, Proxmox VE, TP-Link Omada, Cisco Meraki or Fortinet FortiGate, as many of each as you run, and IP Recon reads their inventory over read-only APIs and joins it to the scan by hardware address. A UniFi client shows its access point; a Proxmox guest shows the node it runs on.
REPORTS YOU CAN HAND SOMEONE
Export to HTML, PDF, CSV or JSON, four formats from one schema, on either platform. The PDF is the deliverable: share it from the phone in the meeting, or export it at the desk. A scan you stopped part way through says so in every format, instead of reading like a complete one.
Put your own organization name and logo on it, with a line naming who it was prepared for.
ON MAC
A topology diagram places each device under the access point or switch it connects through.
Schedule scans daily, weekly or on your own interval, and get told when a new device appears, a MAC vendor changes, or something unauthorized shows up. Tag, rename and annotate devices and set approval state; it persists across scans and into every format. Saved searches, with a query builder, keep watch on what matters.
ON IPHONE AND IPAD
The scan happens where you are standing: the server room, the ceiling, the retail floor. Find the unknown device, then walk toward it. The same rule engine runs here, with Bonjour, SNMP and service fingerprinting. Scan up to five subnets at once, keep a history of what you found, and share any of the four formats from the sheet.
PRIVACY
Scanning and identification happen on your own device. No analytics, no tracking, no account, and nothing is sent to us. Optional Fingerbank lookups on the Mac use a key you supply. Scanning is limited to private address ranges, so it cannot be pointed at the wider internet.
Buy it once. No subscription, no ads.
Show more
