Yes. Scans run the open-source Nmap scanner on isolated servers. The free Basic Scan runs nmap -sV --script vuln against the 1,000 most common TCP ports, and the exact command is shown with the results.

Can I choose my own Nmap options?

No. FreshScanSentry runs two fixed profiles: the free Basic Scan (nmap -sV --script vuln) and the paid Deep Scan (nmap -sV -O --script vuln -p-, plus OWASP ZAP). If you need custom flags, install Nmap from nmap.org and run it yourself.

Why run Nmap online instead of on my own computer?

Running Nmap from inside your network shows what is open internally. Running it online, from outside, shows what your firewall exposes to the internet. There is also nothing to install, and the results come with explanations.

Can I scan scanme.nmap.org to try it?

Yes. The Nmap project runs scanme.nmap.org so anyone can test scanners against it. It is a good way to see what a report looks like before scanning your own systems.

Free tool · Real Nmap, no install

Nmap online, with the results explained

Run a real Nmap scan against your IP address or domain from the internet. Get every result rated and explained, not just raw output.

What runs: the open-source Nmap scanner, on isolated servers, against the target you enter:

nmap -sV --script vuln your-domain-or-ip

That is service and version detection plus Nmap's vulnerability-detection scripts, on the 1,000 most common TCP ports. It's free, with no account and no card.

Run Nmap now

Why run Nmap online

It sees what attackers see. Nmap on your own laptop, inside the office, shows the internal network. Run from the internet, it shows what your router or firewall actually lets through.
Nothing to install. No packages, no root access, no firewall rules on your side.
Output you can act on. Raw Nmap output is dense. Each open port and script result is turned into a short explanation, a High, Medium, Low or Info rating, and a fix. The original output is still there if you want it.

Raw Nmap vs. FreshScanSentry results

The same finding, two ways. What Nmap prints:

PORT     STATE SERVICE       VERSION
3389/tcp open  ms-wbt-server Microsoft Terminal Services

What your report says:

Your report office.example.com

3389 Remote Desktop Reachable from the whole internet. Put it behind a VPN or close it. High

Linked to a step-by-step fix guide

The two scan profiles

Scan	Command	Price
Basic Scan	`nmap -sV --script vuln`	Free
Deep Scan	`nmap -sV -O --script vuln -p-` + OWASP ZAP web app test	$59

What the flags mean:

-sV: probe open ports to find which program and version is answering.
--script vuln: run Nmap's scripts in the "vuln" category, which check for known weaknesses such as Heartbleed and match versions against public CVE lists.
-O: guess the operating system from how the machine responds.
-p-: check all 65,535 TCP ports instead of the 1,000 most common.

Options are fixed, so you can't pass your own flags. For custom scans, install Nmap from nmap.org and run it yourself.

Common questions

Is this really Nmap?

Yes. The scan runs the real Nmap on isolated servers, and the exact command is shown with your results so anyone can check or repeat it.

Can I try it on a test target first?

Yes. Scan scanme.nmap.org, a server the Nmap project runs for exactly this. You can also look at a sample PDF report from a real scan of it.

Can I scan any IP address?

Only ones you own or have written permission to test. You confirm authorization before each scan, and the confirmation is recorded.

Does it scan UDP?

No. Both profiles scan TCP ports.

Sources: Nmap version detection · Nmap NSE "vuln" category · scanme.nmap.org