Safe sourcing
Where to get each tool
TechScan365 hosts no software and never will. This page names the genuine source of every product we cover and shows how to verify what you receive before it touches a server.
Entry checked against the record · initialled by Husanjon Ruzaliev (editor)
Why there are no copies here
IPAM and discovery tools end up on servers with broad network reach and, often, credentials for DHCP, DNS and SNMP. That makes a tampered copy far more dangerous than a tampered desktop utility. Look-alike sites buy ads against popular tool names and repackage genuine software with extras, so the rule is simple: take every product from the vendor or project that publishes it, and verify it before deployment. We cannot make a copy more trustworthy than the original, so we do not offer one — every link below goes to the maker’s own page.
Official sources for all 9 tools
| Tool | Published by | Licence | Official site | What to check |
|---|---|---|---|---|
| phpIPAM | phpIPAM project | GPLv3 | Visit phpipam.net | Self-hosted PHP app. Take a tagged release from the project’s GitHub repository linked on phpipam.net, and check the tag before deploying. |
| NetBox | NetBox Labs | Apache 2.0 + paid | Visit netboxlabs.com | Community edition: tagged releases from the netbox-community GitHub repository or the project’s official Docker image. Cloud and Enterprise: through a NetBox Labs account. |
| GestioIP | GestioIP | GPLv3 | Visit gestioip.net | Perl web app. Use the release linked from gestioip.net (hosted on the project’s SourceForge page) or the Docker Compose project the site links to. |
| SolarWinds IP Address Manager | SolarWinds | Commercial · trial | Visit solarwinds.com | Start from the trial form on solarwinds.com; licensed customers use the SolarWinds customer portal. Windows files should be signed by SolarWinds. |
| ManageEngine OpUtils | ManageEngine (Zoho Corp.) | Free edition + paid | Visit manageengine.com | Obtain the Windows or Linux build from manageengine.com only. Windows files should carry a Zoho Corporation signature. |
| Micetro | BlueCat (formerly Men & Mice) | Commercial · trial | Visit bluecatnetworks.com | No public self-service copy: request a trial or quote through bluecatnetworks.com and use the links BlueCat provides. |
| Angry IP Scanner | Anton Keks | GPLv2 | Visit angryip.org | Follow the links on angryip.org to the project’s own GitHub releases; the Windows and macOS packages bundle Java. |
| LizardSystems Network Scanner | LizardSystems | Free personal · paid business | Visit lizardsystems.com | Windows only. The vendor lists a SHA-256 for the current build on its product page; compare it with Get-FileHash before running. |
| LizardSystems LanCalculator | LizardSystems | Free personal · paid business | Visit lizardsystems.com | Windows only. No checksum is published at the time of writing, so check the file’s digital signature details and scan it before running. |
Links open the vendor’s or project’s own site in a new tab. We are none of these publishers and receive nothing when you follow a link.
A verification routine for servers
- Start from the address you typed. Follow a link from the table, or key in the vendor’s domain by hand, then read the address bar carefully before anything gets executed. Look-alike domains add words such as “-free” or “-pro”, or swap the top-level domain.
- Refuse anything that asks for less security. A page that wants you to disable antivirus, open a password-protected archive or accept “recommended offers” is not the vendor. None of the products on this site needs any of that.
- Check Windows signatures. From a PowerShell prompt, inspect the package:
ExpectGet-AuthenticodeSignature .\package.exe | Format-List Status, SignerCertificateValidunderStatus, with a signer that matches the publisher listed in the table. - Compare checksums where the publisher lists them. Compute the hash and compare every character with the value on the vendor’s page:
# Windows (PowerShell) Get-FileHash .\package.exe -Algorithm SHA256 # Linux / macOS sha256sum package.tar.gz # or: shasum -a 256 - Pin open-source releases to a tag. For self-hosted web apps such as phpIPAM and NetBox, deploy a tagged release rather than whatever is on the main branch, and record the tag in your change log:
For container deployments, reference the project’s official image by version tag or digest rather thangit clone https://github.com/<project>/<repo>.git cd <repo> && git fetch --tags && git checkout <release-tag> git log -1 --format='%H %an %ad'latest.
Keep endpoint protection on
Some security products flag network scanners as potentially unwanted because probing addresses is exactly what they do. If that happens to a file you obtained from the publisher and verified as above, add a narrow exclusion for that file or folder. Never switch protection off wholesale, and never follow a website’s advice to do so. A signature or hash that fails to match means the file goes in the bin and you fetch a fresh copy from the publisher’s own site.
Next steps
Point discovery features only at address space you administer or are authorized to assess. To decide which product fits, start with the IPAM software comparison, then see the guides for step-by-step procedures.