qsa.sh
qsa.sh is a tool that performs an external port and vulnerability scan of your own public IP address, executed directly from your terminal with a single curl command.
Our verdict
Who it's for
External port and vulnerability scans from your terminal
Who should look elsewhere
IPv4 only, IPv6 connections are refused.
Pros
- +Zero installation, just run curl; no agent or software to deploy.
- +Transparent and auditable, uses only public open-source tools, no black box.
- +Strictly limited to scanning your own IP, with consent gate and opt-out for operators.
Cons
- −IPv4 only, IPv6 connections are refused.
- −Free scan limited to one per 24 hours and only top 1,000 ports; Full and Deep require payment.
Key features
- ✓Scans only your own connecting public IP, no target field, cannot be pointed at others.
- ✓Uses naabu, nmap + vulners, and nuclei, all open source, transparent toolchain.
- ✓Live terminal streaming of results as they are found (ports, services, versions, CVEs).
- ✓No data stored; results ephemeral, only rate-limit counters retained temporarily.
- ✓15-second pre-scan consent window with Ctrl-C abort option.
- ✓Opt-out mechanism for IPs/ranges you control, permanently excluded from all scans.
- ✓Paid tiers use one-time tokens with no account needed; reports delivered async or emailed.
- ✓Refuses known CGNAT, mobile-carrier, proxy, VPN, Tor, and IPv6 origins.
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Free | $0 | month | Top 1,000 TCP ports; -sV --script vulners; ~2,000 curated vuln checks |
| Full Pro | $5 | month | All 65,535 TCP ports; -sV --script vulners; ~2,000 curated vuln checks, all ports |
| Deep | $7 | month | All 65,535 TCP ports; -sV --script vulners; ~10,500 full set + custom vuln checks |