Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | OWASP Amass by OWASP View product | Subfinder View product |
|---|---|---|
| Overview | ||
| What it is | OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives. | Subfinder is a passive subdomain enumeration tool used for Web Discovery. Highlights include fast DNS enumeration. Compare it with other Attack Surface Management tools. |
| Product type | Open-Source Network Mapping & Attack Surface Discovery Tool | Passive Subdomain Enumeration Tool |
| Best for | Security Researchers, Penetration Testers, AppSec Teams, Enterprise IT | Bug Hunters, Security Researchers, Pentesters |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | On-Premise | Cloud |
| Deployment details | Self-Hosted; CLI; Container; CLI executable; Docker container; Go library | CLI; Open Source; Go; Open-source CLI binary |
| Data residency | Local machine; Self-hosted | Local / Operator Controlled |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: no | SSO: no |
| Role-based access (RBAC) | RBAC: no | RBAC: no |
| Multi-tenant | Multi-tenant: no | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | LinuxmacOSWindowsDocker | Linux CLImacOS CLIWindows CLIDockerOSINT APIs |
| Compliance | Open-source Apache 2.0OWASP Project Standards | Open Source (MIT License) |
| Integrations & coverage | ||
| Integrations | Neo4jPostgreSQLMaltegoDockerOWASP ZAP | Security APIsLinux CLIDocker |
| Industries | Security ResearchersPenetration TestersAppSec TeamsEnterprise IT | Bug HuntersSecurity ResearchersPentesters |
| Regions | Global | Global |
| Vendor | ||
| Company | OWASP | ProjectDiscovery |
| Headquarters | Global nonprofit organization | Global / Remote |
| Company size | 11-50 | 11-50 |
| Founded | 2001 | 2019 |
Overview
What it is
OWASP Amass
OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives.Subfinder
Subfinder is a passive subdomain enumeration tool used for Web Discovery. Highlights include fast DNS enumeration. Compare it with other Attack Surface Management tools.Product type
OWASP Amass
Open-Source Network Mapping & Attack Surface Discovery ToolSubfinder
Passive Subdomain Enumeration ToolBest for
OWASP Amass
Security Researchers, Penetration Testers, AppSec Teams, Enterprise ITSubfinder
Bug Hunters, Security Researchers, PentestersPricing
Pricing model
OWASP Amass
Contact VendorSubfinder
Contact VendorFree trial
OWASP Amass
Free trial: yesSubfinder
Free trial: yesDeployment
Deployment options
OWASP Amass
On-Premise
Subfinder
Cloud
Deployment details
OWASP Amass
Self-Hosted; CLI; Container; CLI executable; Docker container; Go librarySubfinder
CLI; Open Source; Go; Open-source CLI binaryData residency
OWASP Amass
Local machine; Self-hostedSubfinder
Local / Operator ControlledKey features
What it offers
OWASP Amass
- OSINT source scraping
- Active & passive DNS enumeration
- Graph database architecture
- ASN discovery
- Certificate transparency parsing
- External asset discovery
- Subdomain enumeration
- OSINT reconnaissance
Subfinder
- Passive subdomain discovery
- Multi-engine OSINT querying
- Fast DNS enumeration
- Silent reconnaissance
- Attack Surface Management
- Asset Discovery
- Web Discovery
- OSINT
Platform & access
API access
OWASP Amass
API access: yesSubfinder
API access: noSingle sign-on (SSO)
OWASP Amass
SSO: noSubfinder
SSO: noRole-based access (RBAC)
OWASP Amass
RBAC: noSubfinder
RBAC: noMulti-tenant
OWASP Amass
Multi-tenant: noSubfinder
Multi-tenant: noMobile app
OWASP Amass
Mobile app: noSubfinder
Mobile app: noSupported platforms
OWASP Amass
LinuxmacOSWindowsDocker
Subfinder
Linux CLImacOS CLIWindows CLIDockerOSINT APIs
Compliance
OWASP Amass
Open-source Apache 2.0OWASP Project Standards
Subfinder
Open Source (MIT License)
Integrations & coverage
Integrations
OWASP Amass
Neo4jPostgreSQLMaltegoDockerOWASP ZAP
Subfinder
Security APIsLinux CLIDocker
Industries
OWASP Amass
Security ResearchersPenetration TestersAppSec TeamsEnterprise IT
Subfinder
Bug HuntersSecurity ResearchersPentesters
Regions
OWASP Amass
Global
Subfinder
Global
Vendor
Company
OWASP Amass
OWASPSubfinder
ProjectDiscoveryHeadquarters
OWASP Amass
Global nonprofit organizationSubfinder
Global / RemoteCompany size
OWASP Amass
11-50Subfinder
11-50Founded
OWASP Amass
2001Subfinder
2019