PocketPorts - Port Scanner

Know what your domain looks like to the internet, before someone else does.

PocketPorts continuously monitors the public, internet-facing TCP ports on the domains and IPs you own, surfaces exposed services, and notifies you the moment a new port opens or a finding gets more severe. Built for security engineers, indie operators, sysadmins, and anyone who would rather discover their own exposed admin panel than have an attacker do it first.

DESIGNED FOR TRUST
- Ownership-gated: every host is verified via a DNS TXT record before any scan runs. We will never scan anything you do not control.
- Authorization-attested: you affirm in-app that you have explicit authorization to scan. No exceptions, recorded server-side.
- Privacy-first: service banners are reduced to a fingerprint before storage. Your scan data lives only in your account. Never shared, never sold.
- Sign in with Apple only. No email/password. No third-party login providers. No analytics SDKs that follow you around the internet.

WHAT YOU CAN SCAN
- Public domains you own (DNS TXT verifies)
- Your current public IP (auto-detected, optional)
- Both IPv4 and IPv6

TIER OVERVIEW
Free
- 1 monitored asset
- 1 scan per day
- 12-port curated list

Starter ($2.99/mo or $29.99/yr)
- 5 monitored assets
- 3 scans per day
- Curated expanded port list
- Push notifications when a new port opens
- Push notifications when finding severity rises

Pro
- 25 monitored assets
- 20 scans per day
- Up to 50 ports per scan
- Custom TCP ports
- Banner grabbing
- Service fingerprinting
- CVE matching on findings
- Full scan-history timeline

MSP
- 100 monitored assets
- 100 scans per day
- Everything in Pro
- Asset grouping
- Higher daily limits for teams managing many tenants

PRIVACY AND COMPLIANCE
- One-tap account deletion in Settings (GDPR Article 17, CCPA right-to-delete)
- One-tap data export as portable JSON (GDPR Articles 15 and 20, CCPA right-to-know)
- Subscription state derived server-side; client-side claims cannot unlock paid features
- Marketing email is double-opt-in and revocable from Settings or any email footer

REQUIREMENTS
- iOS 17 or later, iPhone only
- An Apple ID (Sign in with Apple)
- A domain or IP that you own and can verify via DNS

Scan responsibly. PocketPorts is not for use against infrastructure you do not own or have explicit written authorization to test.

Privacy Policy: https://www.weavehub.app/pocketports/privacy
Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/