Open-source network auditing · 224 vendors · local lookups

Find network hardware that has lost support.

Scan your local network from Linux or WSL2. SunsetScan finds devices and exposed services, then checks lifecycle evidence from 224 vendors using local data. Get a report that shows what needs attention and the vendor evidence behind it.

Free to try for noncommercial use · No account or EOL API required for scans

Current release v2.2.1 · Scanner code MIT · Hardware data CC BY-NC 4.0

What you get

Know what is connected. Know what needs action.

Built for home networks and small IT teams that need more context than a port list. SunsetScan uses Nmap and local data to make device and service evidence easier to review.

01

Find what is online

Discover hosts, open ports and service versions. Device identification combines evidence such as HTTP fingerprints, banners, MAC vendors and SNMP when available.

02

See what deserves attention

Check for insecure services, common configuration issues, software end-of-life signals and CVE matches based on detected versions. Follow the evidence for each finding.

03

Spot support deadlines

Compare detected models with manufacturer lifecycle evidence. Clear support endings stand out; incomplete vendor status is flagged for review.

Hardware lifecycle data

224 vendors. Checked locally.

SunsetScan brings manufacturer lifecycle evidence into scans of routers, switches, cameras, NAS devices and related network gear. The database is installed locally, so a scan needs no online EOL lookup.

Lifecycle records
86,276
Model summaries
81,738
Represented vendors
224

Manufacturer notices, support pages and product tables are mapped into one lifecycle model. The full validated database ships in the Debian package; smaller downloadable profiles are available for source installs.

Inspect the published database summary

In our September 2026 check, SunsetScan covered 224 vendors; eol.network listed 55 and EOSL.ai listed 19. Explore the comparison ↗

The work behind the numbers

“End of life” means different things to different vendors.

SunsetScan interprets vendor-specific terms, normalizes models and part numbers, removes duplicate entries and keeps unclear support claims marked for review. A discontinued label alone does not become a claim that security updates have stopped.

Why it matters

A router cannot patch itself after support ends.

Network gear sits at the points where traffic enters, leaves and moves through a network. When its maker stops security updates, newly discovered flaws may remain open. An unsupported router at the network edge deserves priority. Replace unsupported network gear; restrict access and isolate it while replacement is under way.

Check your own network with SunsetScan ↗

This advice follows guidance from the Canadian Centre for Cyber Security and Australian Cyber Security Centre.

See the output

See the finding. Then see the evidence.

See what SunsetScan reports for three network devices: a TP-Link lab result, an ASUS router that needs lifecycle review, and a Linksys router whose security support has ended.

01 / Example report

TP-Link Archer C7 example report

See a TP-Link hardware lifecycle finding alongside exposed services, software EOL results and recommended actions. Generated with v2.1.1 in an authorized Linux lab.

HIGHTP-Link Archer C7 · Security updates ended
Open the TP-Link example ↗Source report in the repository
02 / Example report

ASUS RT-AC68U: lifecycle review needed

The model appears in ASUS lifecycle data. SunsetScan flags it for review until firmware and security update status can be confirmed.

LOWASUS RT-AC68U · Lifecycle review needed
Open the ASUS example ↗ASUS lifecycle source
03 / Example report

Linksys WRT1900AC: security updates ended

See the high severity hardware finding, Linksys support date, source and next steps in SunsetScan's v2.2.1 report.

HIGHLinksys WRT1900AC · Security updates ended
Open the Linksys example ↗Linksys lifecycle source

Get started

Run SunsetScan on your network.

Pick the install path for your Linux system, run setup once, then start a local scan. The Debian package includes the full validated hardware database. Installation downloads dependencies; scans use local caches afterward.

01 / Debian, Ubuntu, Kali, Raspberry Pi OSRelease notes ↗

Download the package and checksum, verify them, then install.

curl -fLO https://github.com/NoCoderRandom/sunsetscan/releases/download/v2.2.1/sunsetscan_2.2.1-1_all.deb
curl -fLO https://github.com/NoCoderRandom/sunsetscan/releases/download/v2.2.1/sunsetscan_2.2.1-1_all.deb.sha256
sha256sum -c sunsetscan_2.2.1-1_all.deb.sha256
sudo apt install ./sunsetscan_2.2.1-1_all.deb
sudo sunsetscan --setup
sudo sunsetscan
02 / Other Linux, WSL2Install guide ↗

Clone the repository and run its installer. Run setup as your normal user in a source checkout.

git clone https://github.com/NoCoderRandom/sunsetscan.git
cd sunsetscan
./install.sh
./sunsetscan --setup
./sunsetscan

SunsetScan community

Found a bug? Have an idea? Tell us.

GitHub Discussions is open for the SunsetScan program. Ask about a scan result, suggest a feature or vendor, report a problem, or share what you would improve.

Join the discussion

For a bug you can reproduce, you can also open an issue.

Open source

Run it on your network. Make unsupported gear visible.

The scanner code is MIT licensed. The hardware lifecycle database has a separate CC BY-NC 4.0 license. Try it on your network. If it helps you spot a device that needs attention, star the repository so more people can find it.