What NirSoft does

NirSoft is a one-man freeware operation founded in 2001 by developer Nir Sofer, providing a catalog of over 200 small, portable Windows utilities organized across password recovery, system tools, browser tools, network monitoring, Outlook/Office, and programmer tools. The utilities are developed primarily in C++ using the Windows API and .NET Framework, with notable expertise in reverse engineering of undocumented binary formats and encryption algorithms. All tools are designed to be portable (no installation required), compact (typically under 100KB), and leave no traces in the Windows Registry or user profile. Most utilities also support command-line operation for automation and scripting use cases.

The business model is donation-based: every utility is distributed free of charge directly from nirsoft.net, with revenue generated solely through voluntary PayPal donations denominated in 13 currencies. There are no paid products, no premium tiers, no advertising, no registration, and no collection of personal information. Distribution is exclusively direct-to-user via the company website, supplemented by NirLauncher (a bundled package of all utilities refreshed every 7-14 days) and PAD files for software listing sites. Marketing is purely organic — SEO, direct traffic, word-of-mouth referrals, and a volunteer-driven translation program that delivers 20+ language versions of popular utilities.

The customer base is a horizontal long tail of individual Windows users, IT professionals, and forensics/security researchers who discover and download tools to solve specific tasks such as recovering lost passwords, monitoring network activity, diagnosing system crashes, exporting browser data, and managing Windows internals. The company has no development team, no executive structure beyond the founder, no rented offices, and operates as a side project maintained in the founder's free time, with no disclosed funding, revenue figures, or institutional ownership.

Name

NirSoft

Legal name

NirSoft

Website

https://nirsoft.net

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

11–50 employees

Short description

NirSoft is a one-man operation founded in 2001 that develops and distributes over 200 small, portable, freeware Windows utilities for password recovery, system diagnostics, network monitoring, and browser data export, funded solely by voluntary PayPal donations.

Ownership category

akta.pro rank

Product category

Windows System Utilities

NAICS

Other Computer Related Services (541519)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

PC/Desktop Software Stores (BPAMADAB)

Keywords

• Password recovery utilities
• Windows system utilities
• Network monitoring tools
• Browser forensics tools
• Portable freeware software

GTM type

B2C

Offering type

Software

Cost components

Infrastructure, Technology or R&D, Operations

Revenue model

1. Donations: NirSoft provides all utilities completely free of charge. Revenue is generated through voluntary donations via PayPal. Users who find the utilities useful are encouraged to donate to support ongoing development and hosting costs.
2. PayPal Donations: The website maintains a PayPal donation form accepting multiple currencies (USD, EUR, GBP, JPY, CAD, AUD, NZD, SEK, DKK, NOK, CHF, HKD, HUF, ILS) to support development and hosting costs.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels4 records

Core offering

NirSoft provides a collection of more than 200 small, portable, freeware utilities for Windows covering password recovery, network monitoring, system diagnostics, browser data analysis, and Outlook/Office management. All utilities are developed in C++, run without installation, leave no traces in the Registry or user profile, and are distributed as free downloads.

Product overview

NirSoft is a one-man operation founded by Nir Sofer that provides a collection of over 200 freeware utilities for Windows operating systems. The utilities are standalone portable applications developed primarily in C++ that require no installation and do not write to the Windows Registry or user profile folders. The product portfolio is organized into distinct categories including Password Recovery Utilities (WebBrowserPassView, WirelessKeyView, Mail PassView, ChromePass, PasswordFox, BulletsPassView, Network Password Recovery, Dialupass, and specialized tools for extracting credentials from Windows Vault, DPAPI-encrypted data, LSA secrets, and various applications), Network Monitoring Tools (CurrPorts, NetworkTrafficView, SmartSniff, DNSQuerySniffer, PingInfoView, WifiInfoView, Wireless Network Watcher, BluetoothView, WakeMeOnLan, LANIPScanner, and packet sniffers), Web Browser Tools (BrowsingHistoryView, BrowserDownloadsView, IECacheView, ChromeCookiesView, FirefoxDownloadsView, and cache viewers for multiple browsers), Desktop Utilities (SearchMyFiles, Volumouse, GUIPropView, FileTypesMan, InsideClipboard, Clipboardic, SpecialFoldersView, and NirCmd command-line utility), System Utilities (BlueScreenView, ProduKey, USBDeview, ShellExView, WhatInStartup, DevManView, DriverView, RegScanner, OpenedFilesView, SysExporter, and comprehensive Windows management tools), Outlook/Office Utilities (NK2Edit, OutlookAttachView, OutlookStatView, OutlookAddressBookView), Programmer Tools (DLL Export Viewer, GDIView, HeapMemView, SimpleProgramDebugger), and Disk Utilities (SearchMyFiles, DriveLetterView, DiskCountersView, AlternateStreamView, and NTFS analysis tools). The utilities are distributed as ZIP-compressed executables, are portable (runable from USB drives without installation), and most support command-line operation for automation. The website offers both 32-bit and 64-bit builds, with some utilities also available in Unicode versions. All utilities are freeware with no commercial licensing options.

Differentiator

Problem solved

Functional benefit

Products and services

• WebBrowserPassView
• CurrPorts
• BlueScreenView
• NirCmd
• USBDeview
• WirelessKeyView
• BrowsingHistoryView
• NK2Edit
• WifiInfoView
• DNSQuerySniffer
• SoundVolumeView
• UninstallView
• mDNSView
• Mail PassView
• SmartSniff
• ControlMyMonitor
• DevManView
• LANIPScanner
• RouterPassView
• OutlookAttachView

Quantifiable outcome

• Most utilities are under 100KB in size, compared to 1-3 MB typical installation packages
• +2 more outcomes

Named customers1 record

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Scale indicators4 records

Recent moves6 records

Expansion highlights4 records

Direct peers

• Belarc Advisor: Belarc Advisor audits installed software, hardware, and Windows configuration for asset management and security compliance, directly overlapping with NirSoft's system information and audit utilities (InstalledAppView, ProduKey, SecuritySoftView).
• CPUID (CPU-Z / HWMonitor): CPUID's CPU-Z, HWMonitor, and PC Wizard are freeware Windows system-information utilities used by the same enthusiast/IT professional audience that downloads NirSoft's driver, monitor, and system-detail tools.
• Wireshark: Wireshark is the open-source leader in network packet capture and analysis, directly comparable to NirSoft's SmartSniff, NetworkTrafficView, DNSQuerySniffer, and CurrPorts. It targets the same network administrator and security analyst segment with cross-platform packet analysis tooling.
• Microsoft Sysinternals: Microsoft's Sysinternals suite (Process Explorer, Autoruns, Process Monitor, etc.) is the canonical and most direct competitor to NirSoft's system-utility category. Both deliver free, portable, deeply technical Windows diagnostics and admin tools aimed at the same IT professional and power-user audience.
• HWiNFO: HWiNFO is a long-running, deeply technical freeware/hybrid Windows hardware information and diagnostics tool. It overlaps with NirSoft utilities like DevManView, DriverView, InstalledDriversList, BatteryInfoView, and MonitorInfoView in addressing IT pros and enthusiasts.
• Eric Zimmerman's tools: A collection of free, command-line and GUI forensic utilities for Windows artifact analysis (registry, prefetch, event logs, LNK files) maintained by a well-known digital forensics practitioner. Overlaps with NirSoft's forensics-adjacent utilities like WinPrefetchView, RegistryChangesView, and FullEventLogView.
• Piriform (CCleaner / Recuva / Defraggler): Piriform built a portfolio of free Windows utilities (system cleaner, file recovery, disk defragmenter) targeted at the same individual power-user audience as NirSoft. CCleaner's mainstream consumer brand and active monetization model offer a directly comparable commercial analog.

Emerging players

• Glarysoft (Glary Utilities): Glarysoft packages multiple Windows cleanup, optimization, and registry utilities into a suite, mirroring NirSoft's multi-utility portfolio but with a freemium commercial model. It targets the same SMB/prosumer user base.

Broad incumbents

• Kroll Ontrack (formerly Data Recovery): A large established commercial data recovery and forensic services provider with adjacent freeware utilities. Comparable in capability scope (forensic/data recovery) to NirSoft's PreviousFilesRecovery, ShadowCopyView, and AlternateStreamView, but operates as a much broader services portfolio.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/nirsoft

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about NirSoft