Sorry to use the search function
I digg a little on the ZigBee protocol because it seems to me to be more and more used in the IoT that it is for the private individuals or the companies. These equipments are often without reliable protection, they can be good entry point on networks in redteam.
Hi,
You can use a cheaper hardware for scan & audit ZigBee protocol with Kismet.
You can found compatible hardware on Kismet Website :
Zigbee - NXP KW41Z
Zigbee - Freaklabs
Zigbee - NXP KW41Z
Zigbee - Raven RZUSBSTICK
Zigbee - nRF 52840
Zigbee: TICC 2531