Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

OWASP AmassRandori2 of 3 products

Side-by-side comparison of OWASP Amass, Randori
Product	OWASP Amass by OWASP View product	Randori by Randori View product
Overview
What it is	OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives.	Randori: exploitability testing and automated adversary emulation. Built for continuous attack surface mapping. Compare Automated Penetration Testing alternatives.
Product type	Open-Source Network Mapping & Attack Surface Discovery Tool	Automated Penetration Testing & Attack Surface Management
Best for	Security Researchers, Penetration Testers, AppSec Teams, Enterprise IT	Technology, Financial Services, Healthcare, Retail, Critical Infrastructure
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: no
Deployment
Deployment options	On-Premise	SaaSCloud
Deployment details	Self-Hosted; CLI; Container; CLI executable; Docker container; Go library	Cloud SaaS; Cloud SaaS
Data residency	Local machine; Self-hosted	United States; European Union
Key features
What it offers	OSINT source scraping Active & passive DNS enumeration Graph database architecture ASN discovery Certificate transparency parsing External asset discovery Subdomain enumeration OSINT reconnaissance	Continuous external attack surface discovery Automated adversary emulation Target Temptation prioritization Exploitability testing Continuous attack surface mapping Automated penetration testing Adversary emulation Vulnerability prioritization
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: no	SSO: yes
Role-based access (RBAC)	RBAC: no	RBAC: yes
Multi-tenant	Multi-tenant: no	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	LinuxmacOSWindowsDocker	Public Internet External AssetsCloud InfrastructureShadow IT Environments
Compliance	Open-source Apache 2.0OWASP Project Standards	SOC 2 Type IIISO 27001GDPRNIST CSF
Integrations & coverage
Integrations	Neo4jPostgreSQLMaltegoDockerOWASP ZAP	IBM QRadarSplunkPalo Alto Networks Cortex XSOARJiraServiceNow
Industries	Security ResearchersPenetration TestersAppSec TeamsEnterprise IT	TechnologyFinancial ServicesHealthcareRetailCritical Infrastructure
Regions	Global	Global
Vendor
Company	OWASP	Randori
Headquarters	Global nonprofit organization	Dallas, Texas, USA
Company size	11-50	51-200
Founded	2001	2018

OWASP Amass

by OWASP

View product

Randori

by Randori

View product

Overview

What it is

OWASP Amass

OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives.

Randori

Randori: exploitability testing and automated adversary emulation. Built for continuous attack surface mapping. Compare Automated Penetration Testing alternatives.

Product type

OWASP Amass

Open-Source Network Mapping & Attack Surface Discovery Tool

Randori

Automated Penetration Testing & Attack Surface Management

Best for

OWASP Amass

Security Researchers, Penetration Testers, AppSec Teams, Enterprise IT

Randori

Technology, Financial Services, Healthcare, Retail, Critical Infrastructure

Pricing

Pricing model

OWASP Amass

Contact Vendor

Randori

Contact Vendor

Free trial

OWASP Amass

Randori

Deployment

Deployment options

OWASP Amass

On-Premise

Randori

SaaSCloud

Deployment details

OWASP Amass

Self-Hosted; CLI; Container; CLI executable; Docker container; Go library

Randori

Cloud SaaS; Cloud SaaS

Data residency

OWASP Amass

Local machine; Self-hosted

Randori

United States; European Union

Key features

What it offers

OWASP Amass

OSINT source scraping
Active & passive DNS enumeration
Graph database architecture
ASN discovery
Certificate transparency parsing
External asset discovery
Subdomain enumeration
OSINT reconnaissance

Randori

Continuous external attack surface discovery
Automated adversary emulation
Target Temptation prioritization
Exploitability testing
Continuous attack surface mapping
Automated penetration testing
Adversary emulation
Vulnerability prioritization

Platform & access

API access

OWASP Amass

Randori

Single sign-on (SSO)

OWASP Amass

Randori

Role-based access (RBAC)

OWASP Amass

Randori

Multi-tenant

OWASP Amass

Randori

Mobile app

OWASP Amass

Randori

Supported platforms

OWASP Amass

LinuxmacOSWindowsDocker

Randori

Public Internet External AssetsCloud InfrastructureShadow IT Environments

Compliance

OWASP Amass

Open-source Apache 2.0OWASP Project Standards

Randori

SOC 2 Type IIISO 27001GDPRNIST CSF

Integrations & coverage

Integrations

OWASP Amass

Neo4jPostgreSQLMaltegoDockerOWASP ZAP

Randori

IBM QRadarSplunkPalo Alto Networks Cortex XSOARJiraServiceNow

Industries

OWASP Amass

Security ResearchersPenetration TestersAppSec TeamsEnterprise IT

Randori

TechnologyFinancial ServicesHealthcareRetailCritical Infrastructure

Regions

OWASP Amass

Global

Randori

Global

Vendor

Company

OWASP Amass

OWASP

Randori

Headquarters

OWASP Amass

Global nonprofit organization

Randori

Dallas, Texas, USA

Company size

OWASP Amass

11-50

Randori

51-200

Founded

OWASP Amass

2001

Randori

2018