Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

OWASP AmassRandori Attack Surface Management2 of 3 products

Side-by-side comparison of OWASP Amass, Randori Attack Surface Management
Product	OWASP Amass by OWASP View product	Randori Attack Surface Management by Randori View product
Overview
What it is	OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives.	Randori Attack Surface Management: shadow IT identification. Built for external asset discovery and shadow IT elimination. Compare Attack Surface Management alternatives.
Product type	Open-Source Network Mapping & Attack Surface Discovery Tool	External Attack Surface Management & Threat Intelligence
Best for	Security Researchers, Penetration Testers, AppSec Teams, Enterprise IT	Financial Services, Government, Technology, Healthcare, Manufacturing
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: no
Deployment
Deployment options	On-Premise	SaaSCloud
Deployment details	Self-Hosted; CLI; Container; CLI executable; Docker container; Go library	Cloud SaaS; Cloud SaaS
Data residency	Local machine; Self-hosted	United States; European Union
Key features
What it offers	OSINT source scraping Active & passive DNS enumeration Graph database architecture ASN discovery Certificate transparency parsing External asset discovery Subdomain enumeration OSINT reconnaissance	Agentless asset discovery Target Temptation scoring Shadow IT identification Continuous perimeter reconnaissance Bi-directional ticketing integration External asset discovery Shadow IT elimination Threat surface prioritization
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: no	SSO: yes
Role-based access (RBAC)	RBAC: no	RBAC: yes
Multi-tenant	Multi-tenant: no	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	LinuxmacOSWindowsDocker	Internet-Facing AssetsPublic Cloud EnvironmentsDNS RecordsSaaS Services
Compliance	Open-source Apache 2.0OWASP Project Standards	SOC 2 Type IIISO 27001GDPRNIST Cybersecurity Framework
Integrations & coverage
Integrations	Neo4jPostgreSQLMaltegoDockerOWASP ZAP	IBM QRadarServiceNowJiraSplunkCortex XSOAR
Industries	Security ResearchersPenetration TestersAppSec TeamsEnterprise IT	Financial ServicesGovernmentTechnologyHealthcareManufacturing
Regions	Global	Global
Vendor
Company	OWASP	Randori
Headquarters	Global nonprofit organization	Dallas, Texas, USA
Company size	11-50	51-200
Founded	2001	2018

OWASP Amass

by OWASP

View product

Randori Attack Surface Management

by Randori

View product

Overview

What it is

OWASP Amass

OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives.

Randori Attack Surface Management

Randori Attack Surface Management: shadow IT identification. Built for external asset discovery and shadow IT elimination. Compare Attack Surface Management alternatives.

Product type

OWASP Amass

Open-Source Network Mapping & Attack Surface Discovery Tool

Randori Attack Surface Management

External Attack Surface Management & Threat Intelligence

Best for

OWASP Amass

Security Researchers, Penetration Testers, AppSec Teams, Enterprise IT

Randori Attack Surface Management

Financial Services, Government, Technology, Healthcare, Manufacturing

Pricing

Pricing model

OWASP Amass

Contact Vendor

Randori Attack Surface Management

Contact Vendor

Free trial

OWASP Amass

Randori Attack Surface Management

Deployment

Deployment options

OWASP Amass

On-Premise

Randori Attack Surface Management

SaaSCloud

Deployment details

OWASP Amass

Self-Hosted; CLI; Container; CLI executable; Docker container; Go library

Randori Attack Surface Management

Cloud SaaS; Cloud SaaS

Data residency

OWASP Amass

Local machine; Self-hosted

Randori Attack Surface Management

United States; European Union

Key features

What it offers

OWASP Amass

OSINT source scraping
Active & passive DNS enumeration
Graph database architecture
ASN discovery
Certificate transparency parsing
External asset discovery
Subdomain enumeration
OSINT reconnaissance

Randori Attack Surface Management

Agentless asset discovery
Target Temptation scoring
Shadow IT identification
Continuous perimeter reconnaissance
Bi-directional ticketing integration
External asset discovery
Shadow IT elimination
Threat surface prioritization

Platform & access

API access

OWASP Amass

Randori Attack Surface Management

Single sign-on (SSO)

OWASP Amass

Randori Attack Surface Management

Role-based access (RBAC)

OWASP Amass

Randori Attack Surface Management

Multi-tenant

OWASP Amass

Randori Attack Surface Management

Mobile app

OWASP Amass

Randori Attack Surface Management

Supported platforms

OWASP Amass

LinuxmacOSWindowsDocker

Randori Attack Surface Management

Internet-Facing AssetsPublic Cloud EnvironmentsDNS RecordsSaaS Services

Compliance

OWASP Amass

Open-source Apache 2.0OWASP Project Standards

Randori Attack Surface Management

SOC 2 Type IIISO 27001GDPRNIST Cybersecurity Framework

Integrations & coverage

Integrations

OWASP Amass

Neo4jPostgreSQLMaltegoDockerOWASP ZAP

Randori Attack Surface Management

IBM QRadarServiceNowJiraSplunkCortex XSOAR

Industries

OWASP Amass

Security ResearchersPenetration TestersAppSec TeamsEnterprise IT

Randori Attack Surface Management

Financial ServicesGovernmentTechnologyHealthcareManufacturing

Regions

OWASP Amass

Global

Randori Attack Surface Management

Global

Vendor

Company

OWASP Amass

OWASP

Randori Attack Surface Management

Randori

Headquarters

OWASP Amass

Global nonprofit organization

Randori Attack Surface Management

Dallas, Texas, USA

Company size

OWASP Amass

11-50

Randori Attack Surface Management

51-200

Founded

OWASP Amass

2001

Randori Attack Surface Management

2018