EnginOPCScanner logo
Version 1.1.0

EnginOPCScanner

OPC UA address space scanner

Connects to OPC UA servers on industrial devices over IP and lists every variable in the address space. Path, NodeId, data type, array dimensions, access rights, description, unit and live value of each variable on a single screen. It is brand-independent and works with any PLC or device that supports OPC UA.

Brand-independentWindows 10 / 11No installationFreeEnglish / Türkçe
Free download (58.9 MB) DemoServer

v1.1.0 · 26 September 2026 · Windows 10/11 x64 · .zip

Screenshots

A look inside

Splash screen
Startup steps and developer card.
Connection
Endpoints are fetched and a security mode is selected.
Main view
Address space tree on the left, variable table in the middle, all details of the selected node on the right.
Live monitoring
Watch list values update in real time via subscription.
Network discovery
OPC UA servers in an IP range are found and used with one click.
Scan comparison
Added, removed and changed variables are listed in colour.
Light theme
The same view in the light theme.
Excel export
All variables and attributes in a filterable table.
Features

Everything you need on site

Fast, staged scanning

Only the structure (tree, paths, NodeIds) is read first, which takes seconds even on large projects, so the table is usable right away. Details such as data type and access load in the background, open folder first.

Every variable detail

Path and NodeId, data type (with enum/struct distinction), ValueRank and array dimensions, access levels, description, EngineeringUnits and EURange, value, status code and timestamp.

Search and filter

Search in name, path, NodeId and description; filter by data type and access. Scope narrows to the folder selected in the tree.

Live monitoring

Double-click a variable to add it to the watch list; values update in real time via subscription with an adjustable update interval.

Safe value writing

Values are validated against the data type, confirmation is required before sending, and every write is logged.

Network discovery

Scans an IP range to find OPC UA servers. Accepts 192.168.1.1-254, 192.168.1.0/24 or a comma-separated list.

Save, open, compare

Save scans as .opcscan files. Comparing two scans lists added, removed and changed variables, matching correctly even if the namespace index changes.

Excel and CSV

Export the full list to .xlsx or CSV. The CSV separator can be ; , or Tab.

Secure connection

Anonymous or username/password login; None, Sign or SignAndEncrypt (Basic256Sha256, Aes128, Aes256). Trust untrusted server certificates once or permanently.

Two languages, two themes

English / Turkish interface and dark / light theme switch instantly without restarting; your choice is remembered.

Usage

Your first scan in 6 steps

  1. 01

    Download and run

    Extract the zip and run EnginOPCScanner.exe. No installation or .NET required.

  2. 02

    Enter the server address

    Fill in Server IP and Port (4840 on most PLCs) or paste a full address such as opc.tcp://192.168.0.10:4840. Use Network discovery if you do not know the address.

  3. 03

    Pick an endpoint, connect

    Click "Get endpoints" to load the security options, choose one and press Connect.

  4. 04

    Scan

    Press Scan. The structure is listed in a few seconds while details fill in the background. Clicking a variable reads its value and all attributes from the PLC instantly.

  5. 05

    Monitor and write

    Double-click a row to add it to the watch list. Right-click to read, write or copy.

  6. 06

    Export and save

    Export to Excel/CSV and save the scan to compare it with the next one.

System requirements

Operating system
Windows 10 / 11 (64-bit)
Installation
None; single exe file, .NET included
Disk space
About 65 MB
Connectivity
TCP access to the OPC UA server (default port 4840)
Device
Brand-independent; any PLC, HMI, SCADA, industrial PC or gateway with an OPC UA server
Language
English, Turkish
DemoServer

No PLC at hand? Try the DemoServer

A small OPC UA server that provides a PLC-like address space. Values in the Simulation folder change every second, and you can add extra variables to test large projects.

> EnginOPCScanner.DemoServer.exe 4840 54000

// port 4840, 54,000 extra variables (GVL folders of 1000)

User: operator / secret · anonymous login is enabled too

Download DemoServer (36.3 MB)
FAQ

Frequently asked questions

Is EnginOPCScanner free?
Yes. EnginOPCScanner is free; no registration or licence key is needed.
Which brands and devices does it work with?
It is brand-independent. Because OPC UA is an open industrial standard, the program works with any device or software that runs an OPC UA server, whatever the manufacturer: PLCs, HMI and SCADA systems, industrial PCs, gateways and software with an OPC UA server.
Does it need installation or .NET?
No. The single exe inside the zip contains every required component and runs directly.
I can connect, but no variables are visible.
On most PLCs, publishing variables over OPC UA has to be enabled separately in the PLC project. Make sure the OPC UA server and variable sharing (symbol configuration / OPC UA access settings) are enabled and the variables to share are selected; otherwise the server looks almost empty.
I get BadSecurityChecksFailed on an encrypted connection.
The server does not trust the client certificate. Save it via Certificate → Export client certificate, then mark it as trusted in the device's OPC UA security / certificate settings. For testing, an endpoint with "None" security can be used.
Can I write a value to the PLC by accident?
Writes are validated against the data type, require confirmation before sending and are recorded in the Write log. Values are only written when you ask for it.
Can I try it without a PLC?
Yes. Download and run the DemoServer, then connect to 127.0.0.1 on port 4840. It provides a PLC-like address space; values in the Simulation folder change every second. User: operator / secret; anonymous login is enabled too.
Where are my settings and passwords stored?
Settings are kept in %AppData%\EnginOPCScanner\settings.json; passwords are never saved. Certificates are in %LocalAppData%\EnginOPCScanner\pki.
I want to report a bug or suggest a feature.
Your feedback helps me improve the program; you can write to me via the contact page. Contact page →

Scan your OPC UA server now

Free, no installation, a single file. v1.1.0 · 58.9 MB

Free download