# Crios — Network Scanner

> Crios is a home network security app for iPhone, iPad and Mac. It scans the local network the
> device is connected to, identifies every device on it, keeps a named inventory, scores the
> network out of 100, and explains each finding and its fix in plain language. All scanning and
> analysis happen on the device; nothing is uploaded.

Publisher: CrioSoft LLC. Site: https://www.criosscan.com
App Store (iPhone, iPad, Mac): https://apps.apple.com/us/app/crios-network-ip-port-scanner/id6502667203
Support: support@criosoft.com

## What it does

- Discovery: a fast liveness sweep treats a refused TCP connection as proof a host exists, so phones
  and laptops with no open ports are still found. A deeper pass then checks the ports typical of home
  devices (44 ports in the default profile).
- Identification: device names, makers, models and platforms from Bonjour/mDNS, UPnP/SSDP device
  descriptions, reverse DNS, MAC address vendor lookup (macOS only) and light service fingerprints
  such as HTTP page titles and SSH banners.
- Device inventory: every device seen is remembered across scans. Users can name a device, set its
  owner and room, add notes and mark it Trusted. Devices are tracked by hardware address where
  available, so a changed IP does not create a duplicate.
- Change alerts: notifications when a device that has never been seen joins the network, and when a
  known device opens a port it did not have before.
- Security score: a 0–100 score with findings ranked by severity, covering Telnet and FTP, exposed
  Remote Desktop and screen sharing, reachable camera streams (RTSP), router admin pages without
  encryption, UPnP port mapping, open databases and smart-home control APIs, plus 38
  known-vulnerability checks with CVE references.
- Internet vs home exposure: Crios asks the router, read-only over UPnP, which ports it forwards from
  the internet. Findings on forwarded ports are raised one severity level; findings the router
  confirmed are reachable only on the local network are lowered one level, never below Low. The issue
  list can be filtered to All, Internet or Home.
- Closing-impact warnings: 39 ports explain what the service is for and what stops working if it is
  closed. Example, port 445: "Other computers can no longer open shared folders on this device, Time
  Machine backups to it stop, and mapped network drives disappear."
- Network map: an interactive topology with the router at the centre and devices clustered by
  category, marking new devices and serious findings.
- Verification: re-check a single port in place, or re-scan a device for a before/after comparison of
  closed, still-open and newly-open ports. Network-wide screens fold newer re-scan results into the
  latest full scan.
- Open what was found: web pages, printer pages and dashboards open in the browser; shared folders,
  FTP, screen sharing, Remote Desktop, SSH and camera streams open in the matching app. On macOS a
  port check can be run in Terminal with a generated netcat command.
- Apple Intelligence (on device): plain-language explanations of a device or finding, a short network
  briefing, name and type suggestions, and an assistant that answers questions using the current scan.
  Requires a device that supports Apple Intelligence with the feature enabled.
- Reports: export scans as PDF, CSV or text, and the device inventory as CSV or JSON.

## Platform notes

- iOS and iPadOS do not expose MAC addresses to apps, so vendor lookup by hardware address is a macOS
  feature. On iPhone and iPad devices are identified by Bonjour, hostname and service fingerprints.
- The macOS app adds a menu bar panel showing the current score, scheduled re-scans while the app is
  open, and the Terminal port check.
- Local Network permission is required on first scan. The app scans only the network the device is
  attached to; it does not scan the internet or remote hosts.

## Privacy

- No account, no cloud service, no analytics. Scan results, the device inventory and Apple
  Intelligence output stay on the device.
- The only outbound requests are to devices on the user's own network during a scan, plus an optional
  manual download of the public IEEE OUI vendor list.

## Intended use

Crios is for networks the user owns or manages. Port scanning networks without permission may breach
local law or a provider's terms, and the app says so in its interface and listing.

## Pages

- [Home](https://www.criosscan.com/): features, screenshots and download links.
- [AI usage policy](https://www.criosscan.com/ai.txt)
- [Privacy policy](https://www.criosoft.com/privacy.html)
- [Support](https://www.criosoft.com/contact.html)