Start free
Tools · offensive security forensics · Alternatives

Nmap alternatives_

As of 4 November 2026, 27 offensive security forensics are named by companies instead of Nmap: Metasploit by 370 companies, IDA Pro by 207, Ghidra by 190.

As of 4 November 2026 · refreshed daily · counts move as websites, DNS and career sites are re-read.

Nmap, companies in postings
399
Most used alternative
Metasploit · 370
Fastest hiring, 90 days
Metasploit
Alternatives ranked
27
Catalogue
T-1.0.1-prov
01 — Ranked by evidence

offensive security forensics companies choose instead of Nmap

Companies naming each tool in their own postings, and postings in the last 90 days. Bars are relative to the category leader.

#AlternativeCompaniescompaniesvs Nmappostings, 90 dCompare
1
MetasploitRapid7
37093%672Nmap vs Metasploit →
2
IDA ProHex-Rays
20752%581Nmap vs IDA Pro →
3
GhidraNSA
19048%566Nmap vs Ghidra →
4
Kali LinuxOffSec
18947%377Nmap vs Kali Linux →
5
Magnet AXIOMMagnet Forensics
17945%622Nmap vs Magnet AXIOM →
6
YARAVirusTotal
13534%326soon
7
FTK Forensic ToolkitExterro
11830%225soon
8
Cobalt StrikeFortra
11328%208soon
9
EnCaseOpenText
11128%246soon
10
BloodHoundSpecterOps
8521%152soon
11
VolatilityVolatility Foundation
6516%124soon
12
Binary NinjaVector 35
6316%196soon
13
X-Ways ForensicsX-Ways Software Technology
6115%132soon
14
CellebriteCellebrite
5514%134soon
15
AutopsyBasis Technology
5013%67soon
16
VelociraptorRapid7
5013%74soon
17
HopperCryptic Apps
3910%309soon
18
MaltegoMaltego Technologies
3910%70soon
19
OllyDbgOleh Yuschuk
3910%70soon
20
ShodanShodan
369%70soon
21
Process MonitorMicrosoft
338%77soon
22
ImpacketFortra
318%46soon
23
SliverBishopFox
308%52soon
24
AFL++
174%34soon
25
Binwalk
133%33soon
26
Core ImpactFortra
103%17soon
27
MimikatzBenjamin Delpy
103%21soon
2,737 companies name a offensive security forensic in their postings.

Filter on any of them, or on Nmap users who also name an alternative, and open the person who owns the stack.

Get the full list Watch this category

Free plan: 1,000 records, no card. The first 20 are above; e-mails are verified at the mail server when you open them.

Cite this

Quote the sentence with the date and the link. The numbers change daily; the link always shows the current ones.

27 offensive security forensics are named by companies instead of Nmap: Metasploit by 370 companies, IDA Pro by 207, Ghidra by 190, measured from their own job postings. (Breaknorm, 4 November 2026, https://breaknorm.co/tools/nmap/alternatives)
How we know

Read from the source, not self-reported

Every number on this page can be traced to a page we crawled or a posting we read. Full methodology →

  • RankingCompanies whose own postings name the tool as the team's system, from the Breaknorm technology catalogue T-1.0.1-prov. Editions are folded into their parent product.
  • 90-day postingsOpen postings first seen or posted in the last 90 days that name the tool.
  • Not includedRatings, prices, feature claims, sponsored positions.
FAQ

Nmap alternatives: questions

What is the most used alternative to Nmap?

Metasploit: 370 companies name it in their own job postings, against 399 for Nmap.

How is this list ranked?

By the number of companies whose own postings name the tool as the team's system (Breaknorm technology catalogue T-1.0.1-prov), then by postings in the last 90 days. No ratings, no vendor input, no sponsored positions.

Does this say which is better?

No. It says who uses what, by company size, industry and country, so you can see which tools companies like yours choose. For features and prices, read the vendors.

Can I get the companies on any of these?

Yes: click the tool, see the first 20 companies, and sign up for the full list with verified e-mails. Counting is free.

Companies and people

Get these companies your way

The same data as a search, over MCP and the API, as bulk files, or pushed to you as it changes.

SearchCompany searchFilter on what a company actually does→SearchPeople searchDecision makers, normalized and verified→MCP and APICompanies over MCP and APICount, search and export from your agent→DatasetCompany and People datasetThe whole market in your warehouse→DataCoverage by countryCheck your market before you start→SearchLocal businessesThe same database, by category and city→

Every company on Nmap
or on what replaces it

Connect the MCP server, filter on any tool, and get 1,000 records free.

Start free with 1,000 records
  1. 01Sign up, no card
  2. 02Connect Claude, ChatGPT or an API key
  3. 03Ask for your market, 1,000 records free