Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | OWASP Amass by OWASP View product | ZeroFox External Attack Surface Management by ZeroFox View product |
|---|---|---|
| Overview | ||
| What it is | OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives. | What does ZeroFox External Attack Surface Management do? It covers risk scoring. See typical use cases, cloud deployment and how it compares to rivals. |
| Product type | Open-Source Network Mapping & Attack Surface Discovery Tool | External Attack Surface Management Platform |
| Best for | Security Researchers, Penetration Testers, AppSec Teams, Enterprise IT | Enterprise IT, Finance, Government, Healthcare |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: no |
| Deployment | ||
| Deployment options | On-Premise | SaaSCloud |
| Deployment details | Self-Hosted; CLI; Container; CLI executable; Docker container; Go library | Cloud SaaS; Cloud SaaS (Agentless Scanning) |
| Data residency | Local machine; Self-hosted | United States; Europe |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: no | SSO: yes |
| Role-based access (RBAC) | RBAC: no | RBAC: yes |
| Multi-tenant | Multi-tenant: no | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | LinuxmacOSWindowsDocker | Public IP SpaceCloud AssetsDNS Records |
| Compliance | Open-source Apache 2.0OWASP Project Standards | SOC 2 Type IIISO 27001 |
| Integrations & coverage | ||
| Integrations | Neo4jPostgreSQLMaltegoDockerOWASP ZAP | ServiceNowJiraTenableQualysAWSAzure |
| Industries | Security ResearchersPenetration TestersAppSec TeamsEnterprise IT | Enterprise ITFinanceGovernmentHealthcare |
| Regions | Global | Global |
| Vendor | ||
| Company | OWASP | ZeroFox |
| Headquarters | Global nonprofit organization | Baltimore, Maryland, USA |
| Company size | 11-50 | 500+ |
| Founded | 2001 | 2013 |
Overview
What it is
OWASP Amass
OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives.ZeroFox External Attack Surface Management
What does ZeroFox External Attack Surface Management do? It covers risk scoring. See typical use cases, cloud deployment and how it compares to rivals.Product type
OWASP Amass
Open-Source Network Mapping & Attack Surface Discovery ToolZeroFox External Attack Surface Management
External Attack Surface Management PlatformBest for
OWASP Amass
Security Researchers, Penetration Testers, AppSec Teams, Enterprise ITZeroFox External Attack Surface Management
Enterprise IT, Finance, Government, HealthcarePricing
Pricing model
OWASP Amass
Contact VendorZeroFox External Attack Surface Management
Contact VendorFree trial
OWASP Amass
Free trial: yesZeroFox External Attack Surface Management
Free trial: noDeployment
Deployment options
OWASP Amass
ZeroFox External Attack Surface Management
Deployment details
OWASP Amass
Self-Hosted; CLI; Container; CLI executable; Docker container; Go libraryZeroFox External Attack Surface Management
Cloud SaaS; Cloud SaaS (Agentless Scanning)Data residency
OWASP Amass
Local machine; Self-hostedZeroFox External Attack Surface Management
United States; EuropeKey features
What it offers
OWASP Amass
- OSINT source scraping
- Active & passive DNS enumeration
- Graph database architecture
- ASN discovery
- Certificate transparency parsing
- External asset discovery
- Subdomain enumeration
- OSINT reconnaissance
ZeroFox External Attack Surface Management
- Continuous asset discovery
- Internet-facing vulnerability mapping
- Forgotten cloud asset inventory
- Shadow IT detection
- Risk scoring
- External attack surface reduction
- Forgotten asset discovery
- Shadow IT mitigation
Platform & access
API access
OWASP Amass
API access: yesZeroFox External Attack Surface Management
API access: yesSingle sign-on (SSO)
OWASP Amass
SSO: noZeroFox External Attack Surface Management
SSO: yesRole-based access (RBAC)
OWASP Amass
RBAC: noZeroFox External Attack Surface Management
RBAC: yesMulti-tenant
OWASP Amass
Multi-tenant: noZeroFox External Attack Surface Management
Multi-tenant: yesMobile app
OWASP Amass
Mobile app: noZeroFox External Attack Surface Management
Mobile app: noSupported platforms
OWASP Amass
ZeroFox External Attack Surface Management
Compliance
OWASP Amass
ZeroFox External Attack Surface Management
Integrations & coverage
Integrations
OWASP Amass
ZeroFox External Attack Surface Management
Industries
OWASP Amass
ZeroFox External Attack Surface Management
Regions
OWASP Amass
ZeroFox External Attack Surface Management
Vendor
Company
OWASP Amass
OWASPZeroFox External Attack Surface Management
ZeroFoxHeadquarters
OWASP Amass
Global nonprofit organizationZeroFox External Attack Surface Management
Baltimore, Maryland, USACompany size
OWASP Amass
11-50ZeroFox External Attack Surface Management
500+Founded
OWASP Amass
2001ZeroFox External Attack Surface Management
2013