Scan internal networks with the Local Connector
Scan internal and on-prem networks with an agent you run in your environment. Local Connector is available on paid tiers for network discovery and TLS certificate checks.
What you can scan
Choose network discovery or TLS certificate inspection for each job. Web application scans and deeper TLS audits use the public scanning service.
Reach internal & on-prem networks
Run discovery against internal hosts and IPv4 networks of up to 256 addresses. The connector checks TCP ports 1–1024 and 36 additional service ports on each host.
Lightweight, self-hosted agent
Run the Docker agent on Linux with Intel or ARM processors. It polls Purple Team Tools over outbound HTTPS and sends results to your account.
You stay in control
You choose the network access available to the agent. Each connector belongs to your account and uses rotating credentials, with optional mutual TLS.
Network discovery and TLS certificates
Discover open TCP ports with optional HTTP header identification, or inspect a TLS certificate for expiry, validity dates and hostname matching. Download reports alongside your other scan results.