NewsPublished 23 Sep 2026

Do any devices on your network still get security updates?

Source Reddit ExploitDev

Discussion

SunsetScan is an open-source local network security auditing tool designed to identify unsupported and end-of-life hardware on home and small business networks. It fingerprints devices, checks software against vulnerability and lifecycle databases from 224 vendors, and produces detailed reports with remediation steps. The tool is read-only and non-destructive, relying on local scanning without external API calls. It aims to help users determine if devices on their networks still receive security updates, thereby reducing risks from unsupported hardware. SunsetScan is primarily supported on Linux and WSL2, with partial support on macOS and no native Windows support. The project includes a large hardware lifecycle database and emphasizes accuracy in lifecycle status classification.

r/hacking (opens in a new tab)u/ButterflyMundane71870 points0 comments

Made SunsetScan to find unsupported hardware on my own network. It’s open source, and I’ll never put it behind a paywall. It scans locally and checks lifecycle data from 224 vendors with no API calls 100% self‑made databases scraped from original vendor websites.
I also created a standard with terminology because in the EoL world there are no ISO standards, so a lot of time went into getting that correct.

Tested it a couple of thousand times on my own network with 30 devices, and also tested it against lab networks with generated devices and VMs.
Happy if anyone would like to try it out and tell me if you find any outdated hardware or a false positive.

GitHub: https://github.com/NoCoderRandom/sunsetscan

Exemple repports can be found at https://www.sunsetscan.com/

Links cited in the discussion

Impact

The tool helps identify devices on a network that no longer receive security updates, which could be vulnerable to known exploits if left unpatched. By detecting unsupported hardware, users can take informed actions to replace or isolate such devices, reducing the attack surface. SunsetScan itself does not introduce vulnerabilities or exploits; it is a security auditing utility. There are no known exploits or active threats associated with SunsetScan. The impact is primarily informational and preventative, enabling better network security posture through awareness of device lifecycle status.

Defensive guidance

No direct mitigation is required as SunsetScan is a security auditing tool, not a vulnerability or exploit. Users should run SunsetScan to identify unsupported devices and follow the tool's recommendations to update, replace, or secure those devices. Since the tool is open-source and read-only, it does not pose a security risk itself. Ensure to run it in supported environments (Linux or WSL2) for full functionality. Keep the hardware lifecycle database updated by running the tool's setup and update commands regularly.

Summary

SunsetScan is a network auditing tool that scans local networks to identify active devices, fingerprint their software, and check against a comprehensive database of hardware lifecycle and vulnerability information from 224 vendors. It detects unsupported or end-of-life devices that may no longer receive security updates, helping users assess potential security risks. The tool produces clear HTML reports with explanations and remediation guidance. It operates entirely locally without modifying network devices or making external API calls. SunsetScan supports Linux and WSL2 environments, with partial macOS support, and is distributed via multiple installation methods including Debian packages and source installation. The hardware lifecycle database is extensive and licensed under CC BY-NC 4.0.

References

Community reviews

Loading reviews…

Discussion

Links cited in the discussion

AI analysisMachine-generated, updated 24 Sep 2026, 06:03 UTC

Technical details

References

Community reviews

Related threats