Internal network inventory and exposure scanner

Windows Credential Manager support

The launcher can save Scantide email/API key and ServiceNow username/password locally in Windows Credential Manager. This keeps secrets off the command line and avoids plain-text configuration files while still making repeat scans easy for administrators.

Start with the GUI launcher

For most Windows administrators, ScantideLauncher.ps1 is now the easiest starting point. It wraps the PowerShell scanner in a graphical interface, detects the local network at startup, explains scan options, checks the scanner version feed, and can download or update the companion files when needed.

What Scantide Auditor PowerShell is for

The script is intended for administrators, security teams, infrastructure teams, and asset owners who need a practical view of internal network exposure without installing agents or running intrusive tests.

Why this matters in plain language

Many companies have more systems online than they think. Some are old test servers, forgotten admin portals, temporary devices, printers, appliances, or servers that were never added correctly to the asset inventory. Scantide helps turn that uncertainty into a list you can actually review. The radio discovery add-on also shows what the scan workstation can see nearby over Wi-Fi and Bluetooth.

What the script can check

Exact checks depend on the version and options you enable, but the PowerShell auditor is designed around practical asset and service evidence.

How to interpret the findings

A finding does not automatically mean something is dangerous. It means there is evidence worth understanding. The report is designed to help teams decide what to verify, document, patch, or remove.

How to run it

Run the script from a Windows machine or server that is allowed to reach the target network range. Use an account and location that match your organization’s scanning policy.

$dest = Join-Path $env:USERPROFILE 'Downloads\ScantideAuditor'
New-Item -ItemType Directory -Path $dest -Force | Out-Null

$base = 'https://www.scantide.com/helpfiles'
$files = @(
    @{ Name = 'ScantideLauncher.ps1'; Url = "$base/ScantideLauncher.ps1" },
    @{ Name = 'ScantideLAN.ps1';      Url = "$base/ScantideLAN.ps1" },
    @{ Name = 'ScantideHelper.ps1';       Url = "$base/ScantideHelper.ps1" },
    @{ Name = 'ScantideRadioHelper.ps1';  Url = "$base/ScantideRadioHelper.ps1" },
    @{ Name = 'ScantidePortHelper.ps1';   Url = "$base/ScantidePortHelper.ps1" },
    @{ Name = 'ScantideCredentialManager.ps1'; Url = "$base/ScantideCredentialManager.ps1" },
    @{ Name = 'oui.csv';                  Url = "$base/oui.csv" }
)

foreach ($file in $files) {
    $target = Join-Path $dest $file.Name
    Write-Host "Downloading $($file.Name)..." -ForegroundColor Cyan
    Invoke-WebRequest -Uri $file.Url -OutFile $target -UseBasicParsing -TimeoutSec 45
    Unblock-File -LiteralPath $target -ErrorAction SilentlyContinue
}

Write-Host ""
Write-Host "Downloaded Scantide Auditor PowerShell files to: $dest" -ForegroundColor Green
Write-Host "Example:" -ForegroundColor Yellow
Write-Host "  cd `"$dest`""
Write-Host "  .\ScantideLauncher.ps1"
Write-Host "  .\ScantideLAN.ps1 -Network 192.168.0.0/24 -PortProfile Standard"
Write-Host "  .\ScantideLAN.ps1 -Network 192.168.0.0/24 -PortProfile Hypervisor"
Write-Host "  .\ScantideLAN.ps1 -Network 192.168.0.0/24 -EnableRadioDiscovery"

Practical internal network audit use cases

Scantide Auditor PowerShell is designed for authorized internal network discovery, Windows network inventory, ServiceNow CMDB comparison, exposed service review and HTML evidence reports. These are the situations where it gives the most value.

Recommended use cases

The PowerShell script is most useful when the goal is to create a practical inventory and exposure baseline for internal networks.

What the report helps answer

A good report should not just say that something was found. It should help the team understand what the finding means and what to do next.

Safety and scope

Scantide Auditor PowerShell is built for authorized visibility. It should be used only on networks where you have permission to perform inventory and exposure review.

FAQ

Scan profiles in the launcher

The current launcher lets the user enter an IP range, then choose a scan profile. If they do not choose anything else, Standard runs. That keeps the normal ScantideLAN behavior as the safe default while still offering focused checks for specific audit questions.

Built-in launcher tools

The Tools tab is meant for quick checks that help the user understand the scan range or interpret a result. These tools do not start a full Scantide scan unless the user explicitly uses the scan-range button.

Need the full setup and usage guide?

The PowerShell manual explains prerequisites, safe scanning scope, common parameters, report interpretation, CMDB comparison, troubleshooting, and recommended operating practices for internal network reviews.

Part of the Scantide visibility ecosystem

Scantide Auditor PowerShell focuses on internal networks. Scantide Observe focuses on website privacy and browser-visible behavior. Scantide Observe Mobile brings similar visibility to Android. Together they help explain what systems, websites, and services are doing in a way people can act on.