Discover assets
Inventory hosts and observed relationships with bounded, evidence-based discovery.
Authorized network intelligence
See the network.
Understand the risk.
NetScope turns authorized network discovery into a clear, explainable picture of your attack surface—from the first host found to the next remediation decision.
scope / ready
Platform overview
From discovery to
decision.
One focused toolkit for authorized assessment work—built around visibility, evidence, and clear priorities.
Understand services
Turn ports, service detection, and OS context into a useful asset record.
Prioritize clearly
Correlate CVE intelligence and calculate transparent risk scores for remediation.
How it works
Every finding has
a trail.
NetScope keeps the chain connected so teams can explain what was found, why it matters, and what happens next.
01Discover authorized assetsStart with explicit scope and target allowlists.
02Identify ports and servicesBuild an inventory from what is actually exposed.
03Correlate potential vulnerabilitiesConnect service context to NVD, CISA KEV, and EPSS.
04Calculate transparent risk scoresMake the drivers behind priority visible.
05Prioritize remediationMove from signal to a focused next step.
Download & run
Start with the
toolkit.
Clone the project, create a clean Python environment, then use the CLI commands already documented in the repository.
Quick start
# clone
git clone YOUR_GITHUB_REPOSITORY_URL.git
cd netscope
# install locally
python3 -m venv .venv
source .venv/bin/activate
pip install -e .Useful commands
# verify
python3 -m unittest discover -v
# inspect risk
python3 -m netscope.cli risk CVE-2025-0001 --cvss 9.8 --epss 0.9 --kev
# inventory + topology
python3 -m netscope.cli inventory scan.json --db netscope.db
python3 -m netscope.cli topology scan.json > topology.json! Only use NetScope against systems and ranges for which you have explicit authorization.
Security first
Useful visibility
needs boundaries.
The project is intentionally designed for authorized assessment—not exploitation.
✓ Authorized scanning only
✓ Target allowlists
✓ Safe bounded concurrency
✓ No exploit execution
✓ No credential attacks
✓ Evidence-based findings