macOS
brew install nmapprovider-native install command
brew / rank 250
Port scanning utility for large networks. Version 7.99 via Homebrew; verified 2026-06-22.
install
brew install nmapprovider-native install command
overview
Port scanning utility for large networks
history
Nmap, short for Network Mapper, is one of the defining open-source security and network-discovery tools. Gordon "Fyodor" Lyon released it in Phrack issue 51 on September 1, 1997 as a Linux-only port scanner of about 2,000 lines; it grew into a cross-platform scanner for host discovery, port scanning, version detection, OS detection, scripting, scan comparison, packet generation, and network troubleshooting.
The official Nmap history highlights rapid early expansion: version 2.00 added OS detection on December 12, 1998; the first GUI appeared in April 1999; Windows support landed in December 2000; Mac OS X support and XML output arrived with Nmap 3.00 on July 31, 2002; and service/version detection was publicly released with Nmap 3.45 on September 16, 2003. The scan engine was rewritten as `ultra_scan` in 2004, raw Ethernet sending appeared in 2005, and the Nmap Scripting Engine arrived in 2006.
Nmap's adoption is unusually broad for a security tool. The official guide describes millions of users worldwide, recognition by publications such as Linux Journal and InfoWorld, and repeated appearances in films. Its own timeline also notes security-community infrastructure: a public Subversion repository in 2006, Google Summer of Code participation, Zenmap integration, and the 2009 release of Ncat and Ndiff as companion tools.
Package nerds install Nmap not only for `nmap` itself but for the companion commands Homebrew ships: `ncat`, `ndiff`, and `nping`. Everyday workflows include `nmap -A -T4 host` for an aggressive inventory scan, targeted `-sV` service/version detection, `-O` OS detection, `-sn` ping sweeps, NSE scripts for protocol checks, `ncat` for socket work, and `ndiff` to compare repeated XML scans.
Nmap is a canonical example of a CLI package whose upstream is bigger than a single binary: it carries data files, scripts, service probes, OS fingerprints, documentation, and multiple related tools. It is packaged almost everywhere, and Homebrew's API reported 14,039 installs in 30 days, 54,604 in 90 days, and 251,639 in 365 days when checked on July 1, 2026.
security posture
network reconnaissance tool.
red risk · medium confidence · escape-surveillance-offensive
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
ncat | executable | indexed executable | Discovered from the local executable index. |
ndiff | executable | indexed executable | Discovered from the local executable index. |
nmap | executable | indexed executable | Discovered from the local executable index. |
nping | executable | indexed executable | Discovered from the local executable index. |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:nmap |
|---|---|
| Version | 7.99 |
| Package manager | Homebrew |
| Homepage | https://nmap.org/ |
| Last updated | 2026-06-22T14:05:38-07:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.