Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | OWASP Amass by OWASP View product | Recorded Future Attack Surface Intelligence View product |
|---|---|---|
| Overview | ||
| What it is | OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives. | Recorded Future Attack Surface Intelligence: risk-based scoring and certificate tracking. Built for digital asset discovery. Compare Exposure Management alternatives. |
| Product type | Open-Source Network Mapping & Attack Surface Discovery Tool | Attack Surface Intelligence & Digital Exposure Management |
| Best for | Security Researchers, Penetration Testers, AppSec Teams, Enterprise IT | Financial Services, Defense, Technology, Healthcare, Critical Infrastructure |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: no |
| Deployment | ||
| Deployment options | On-Premise | SaaSCloud |
| Deployment details | Self-Hosted; CLI; Container; CLI executable; Docker container; Go library | Cloud SaaS; Cloud SaaS |
| Data residency | Local machine; Self-hosted | United States; European Union; Global AWS Regions |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: no | SSO: yes |
| Role-based access (RBAC) | RBAC: no | RBAC: yes |
| Multi-tenant | Multi-tenant: no | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: yes |
| Supported platforms | LinuxmacOSWindowsDocker | Internet-Facing HostsCloud RepositoriesDomain RecordsPublic APIs |
| Compliance | Open-source Apache 2.0OWASP Project Standards | SOC 2 Type IIISO 27001GDPRFedRAMP Authorized |
| Integrations & coverage | ||
| Integrations | Neo4jPostgreSQLMaltegoDockerOWASP ZAP | Recorded Future Intelligence CloudSplunkServiceNowJiraCortex XSOAR |
| Industries | Security ResearchersPenetration TestersAppSec TeamsEnterprise IT | Financial ServicesDefenseTechnologyHealthcareCritical Infrastructure |
| Regions | Global | Global |
| Vendor | ||
| Company | OWASP | Recorded Future |
| Headquarters | Global nonprofit organization | Somerville, Massachusetts, USA |
| Company size | 11-50 | 1,000+ |
| Founded | 2001 | 2009 |
Overview
What it is
OWASP Amass
OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives.Recorded Future Attack Surface Intelligence
Recorded Future Attack Surface Intelligence: risk-based scoring and certificate tracking. Built for digital asset discovery. Compare Exposure Management alternatives.Product type
OWASP Amass
Open-Source Network Mapping & Attack Surface Discovery ToolRecorded Future Attack Surface Intelligence
Attack Surface Intelligence & Digital Exposure ManagementBest for
OWASP Amass
Security Researchers, Penetration Testers, AppSec Teams, Enterprise ITRecorded Future Attack Surface Intelligence
Financial Services, Defense, Technology, Healthcare, Critical InfrastructurePricing
Pricing model
OWASP Amass
Contact VendorRecorded Future Attack Surface Intelligence
Contact VendorFree trial
OWASP Amass
Free trial: yesRecorded Future Attack Surface Intelligence
Free trial: noDeployment
Deployment options
OWASP Amass
Recorded Future Attack Surface Intelligence
Deployment details
OWASP Amass
Self-Hosted; CLI; Container; CLI executable; Docker container; Go libraryRecorded Future Attack Surface Intelligence
Cloud SaaS; Cloud SaaSData residency
OWASP Amass
Local machine; Self-hostedRecorded Future Attack Surface Intelligence
United States; European Union; Global AWS RegionsKey features
What it offers
OWASP Amass
- OSINT source scraping
- Active & passive DNS enumeration
- Graph database architecture
- ASN discovery
- Certificate transparency parsing
- External asset discovery
- Subdomain enumeration
- OSINT reconnaissance
Recorded Future Attack Surface Intelligence
- Automated external asset discovery
- Adversary correlation
- Vulnerability prioritization
- Certificate tracking
- Risk-based scoring
- Digital asset discovery
- Perimeter exposure reduction
- Third-party subsidiary monitoring
Platform & access
API access
OWASP Amass
API access: yesRecorded Future Attack Surface Intelligence
API access: yesSingle sign-on (SSO)
OWASP Amass
SSO: noRecorded Future Attack Surface Intelligence
SSO: yesRole-based access (RBAC)
OWASP Amass
RBAC: noRecorded Future Attack Surface Intelligence
RBAC: yesMulti-tenant
OWASP Amass
Multi-tenant: noRecorded Future Attack Surface Intelligence
Multi-tenant: yesMobile app
OWASP Amass
Mobile app: noRecorded Future Attack Surface Intelligence
Mobile app: yesSupported platforms
OWASP Amass
Recorded Future Attack Surface Intelligence
Compliance
OWASP Amass
Recorded Future Attack Surface Intelligence
Integrations & coverage
Integrations
OWASP Amass
Recorded Future Attack Surface Intelligence
Industries
OWASP Amass
Recorded Future Attack Surface Intelligence
Regions
OWASP Amass
Recorded Future Attack Surface Intelligence
Vendor
Company
OWASP Amass
OWASPRecorded Future Attack Surface Intelligence
Recorded FutureHeadquarters
OWASP Amass
Global nonprofit organizationRecorded Future Attack Surface Intelligence
Somerville, Massachusetts, USACompany size
OWASP Amass
11-50Recorded Future Attack Surface Intelligence
1,000+Founded
OWASP Amass
2001Recorded Future Attack Surface Intelligence
2009