404ops Network Scanner

404ops Network Scanner gives administrators a suite of network diagnostic tools on one admin screen. Tools contact only this site itself or a target you have verified you own, so the plugin cannot be pointed at a stranger's server. Every tool is pure PHP. Nothing shells out to nmap, whois, dig or curl, and only users with the manage_options capability can use the scanner.

Features

• Port scans: Quick Port Scan and Deep Scan, using TCP connections only, with no OS or service detection. Add a ports suffix to a verified target to choose the ports.
• Subnet Discovery: a TCP-connect sweep of a private range that contains this site, at most 254 hosts per run.
• DNS Lookup for A, AAAA, MX, NS, CNAME and TXT records, and Whois Lookup with a parsed RDAP summary.
• HTTP Headers, an SSL Inspector showing the certificate subject, issuer and validity, and an IP Calculator.
• A Live Monitor that shows whether targets are up.
• Proactive email alerts, off by default, when a host goes down or comes back, a port opens or closes, or a watched domain nears expiry.
• A Site Exposure Check that sends at most 60 requests to your own site and reports what a stranger can see, with a plain-language fix for each finding.
• Scan history that keeps the newest 50 scans.
• Target verification: publish the token the plugin shows you as a DNS TXT record or as a file on the host. Verified hosts stay verified for 90 days.
• Optional AI triage that turns one scan's output into a plain-English risk summary, using your own AI connection.

Pro add-on

Exposure Watch, an hourly own-site exposure watch with a reviewed baseline, is available in the Pro add-on, along with the multisite fleet dashboard, larger subnet bounds and longer scan history. The free tools and the Site Exposure Check remain complete.

Free version

The free version is available on WordPress.org once it is listed there.