LAN Orangutan is a network discovery tool designed for homelabbers and network enthusiasts who want a self-hosted way to scan, label, and track devices on local and multiple networks without relying on cloud services. It wraps the well-known nmap scanner in a Go binary that bundles both a command line interface and a modern web dashboard, providing persistent device labeling, grouping, and note-taking capabilities.
What LAN Orangutan does and how it works
At its core, LAN Orangutan is a wrapper around nmap, the popular network mapper used for network discovery and security auditing. Written in Go, it ships as a single cross-platform binary that requires only nmap installed on the host system as an external dependency. This design choice means it has no other runtime dependencies, making deployment straightforward across Windows, macOS, and Linux.
Its architecture combines the power of nmap scans with a web UI and CLI for managing and exporting scan results. The web dashboard offers real-time status updates, search and filtering capabilities, and keyboard shortcuts for efficient device inventory management. Users can label devices permanently, group them logically, and add notes. This persistent metadata makes LAN Orangutan more than just a scanner — it becomes a network inventory tool.
A notable feature is its support for multi-network scanning and integration with Tailscale, a secure VPN service. This enables tracking devices across different network segments and even remote networks connected via Tailscale, all from the same interface.
Technical strengths and design tradeoffs
What sets LAN Orangutan apart is how it packages network scanning into a polished product-like experience rather than a raw tool. Wrapping nmap in Go allows it to leverage a battle-tested scanning engine while adding features that nmap alone doesn’t provide, like persistent device labels and a user-friendly web interface.
The codebase benefits from Go’s static typing, cross-compilation, and performance characteristics, resulting in a lightweight single binary that simplifies distribution. The web UI implementation focuses on responsiveness and usability, supporting live updates and keyboard shortcuts to boost developer experience.
However, the tradeoff here is that LAN Orangutan depends on nmap as an external tool. This means it inherits nmap’s scanning capabilities and limitations. Users must install and maintain nmap separately. Additionally, wrapping nmap means the tool relies on executing an external process rather than implementing scanning natively in Go, which could affect performance and flexibility in some edge cases.
The use of a persistent device labeling system is a practical feature for homelabbers who want to keep track of devices over time, but it adds complexity in syncing labels if multiple instances are used without a centralized database. The tool currently does not bundle a database server; persistence is handled internally within the application scope.
The Tailscale integration is a smart choice for extending network visibility beyond the local LAN, especially useful for those running homelabs with remote nodes. This integration supports scanning devices reachable over the Tailscale VPN, which many network tools do not support out of the box.
Quick start
Download
Grab the latest release of LAN Orangutan for your platform from GitHub Releases.
Run
## Requirements
- **nmap** must be installed:
- macOS: `brew install nmap`
- Ubuntu/Debian: `sudo apt install nmap`
- Windows: Download from nmap.org
This minimal setup shows the tool’s focus on simplicity in deployment. After installing nmap, users can run the LAN Orangutan binary to start scanning and managing devices through the web interface or CLI.
Verdict
LAN Orangutan is a pragmatic, well-structured tool for homelabbers who want persistent network device tracking without cloud dependencies. Its use of nmap under the hood means it leverages a robust scanning engine but requires the external dependency and some familiarity with nmap’s capabilities and limitations.
The combination of CLI exports (JSON/CSV) and a real-time web dashboard with persistent labels and grouping makes it a step above one-off scanning scripts. The Tailscale integration adds valuable flexibility for multi-network environments.
It is not a network monitoring or intrusion detection system but rather a lightweight inventory and discovery tool that fits well in a self-hosted homelab environment. If you want a simple, no-frills way to keep tabs on devices across local and VPN-connected networks, LAN Orangutan delivers with a clean UX and practical features.
The tradeoff is the reliance on nmap and the lack of a centralized database for syncing labels across multiple instances. But for many practitioners, these are reasonable in exchange for a zero-dependency, cross-platform single binary solution that feels more like a product than a script.
Related Articles
- Reconya: native Go network reconnaissance with layered scanning and honest Docker tradeoffs — Reconya is a native Go network reconnaissance tool combining ICMP, TCP, and ARP scanning with a vanilla JS web dashboard
- Blackbox Node: offline AI assistant over LoRa mesh with local llama.cpp and ecash payments — Blackbox Node runs a local llama.cpp LLM over a Meshtastic LoRa mesh, enabling offline AI queries and ecash payments via
- Building production-ready RAG workflows with n8n using free JSON templates — Explore over 200 pre-built n8n workflow templates integrating vector databases, embedding models, and LLMs for rapid RAG
- Langchain-Chatchat: A model-agnostic orchestration layer for Chinese-language RAG and Agents — Langchain-Chatchat offers a flexible, offline-capable orchestration layer for multiple Chinese LLMs and RAG approaches,
- Ferret v2: A declarative Go engine for web data extraction with a new API architecture — Ferret v2 is a Go-based declarative system for web scraping that introduces a native Go API and a compatibility layer to
→ GitHub Repo: 291-Group/LAN-Orangutan ⭐ 223 · Go