Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | OWASP Amass by OWASP View product | ZeroFox External Cybersecurity by ZeroFox View product |
|---|---|---|
| Overview | ||
| What it is | OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives. | Get the facts on ZeroFox External Cybersecurity: automated takedowns. Built for brand security. Compare it with other Threat Intelligence options before you decide. |
| Product type | Open-Source Network Mapping & Attack Surface Discovery Tool | Unified External Threat Intelligence & Protection |
| Best for | Security Researchers, Penetration Testers, AppSec Teams, Enterprise IT | Cross-industry, Fortune 500, Media, Telecom |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: no |
| Deployment | ||
| Deployment options | On-Premise | SaaSCloud |
| Deployment details | Self-Hosted; CLI; Container; CLI executable; Docker container; Go library | Cloud SaaS; Cloud SaaS; Managed Disruption Services |
| Data residency | Local machine; Self-hosted | United States; EU |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: no | SSO: yes |
| Role-based access (RBAC) | RBAC: no | RBAC: yes |
| Multi-tenant | Multi-tenant: no | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: yes |
| Supported platforms | LinuxmacOSWindowsDocker | Global Threat IntelligenceExternal Perimeters |
| Compliance | Open-source Apache 2.0OWASP Project Standards | SOC 2 Type IIISO 27001GDPR |
| Integrations & coverage | ||
| Integrations | Neo4jPostgreSQLMaltegoDockerOWASP ZAP | SIEMSOARTIP platformsSlackJira |
| Industries | Security ResearchersPenetration TestersAppSec TeamsEnterprise IT | Cross-industryFortune 500MediaTelecom |
| Regions | Global | Global |
| Vendor | ||
| Company | OWASP | ZeroFox |
| Headquarters | Global nonprofit organization | Baltimore, Maryland, USA |
| Company size | 11-50 | 500+ |
| Founded | 2001 | 2013 |
Overview
What it is
OWASP Amass
OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives.ZeroFox External Cybersecurity
Get the facts on ZeroFox External Cybersecurity: automated takedowns. Built for brand security. Compare it with other Threat Intelligence options before you decide.Product type
OWASP Amass
Open-Source Network Mapping & Attack Surface Discovery ToolZeroFox External Cybersecurity
Unified External Threat Intelligence & ProtectionBest for
OWASP Amass
Security Researchers, Penetration Testers, AppSec Teams, Enterprise ITZeroFox External Cybersecurity
Cross-industry, Fortune 500, Media, TelecomPricing
Pricing model
OWASP Amass
Contact VendorZeroFox External Cybersecurity
Contact VendorFree trial
OWASP Amass
Free trial: yesZeroFox External Cybersecurity
Free trial: noDeployment
Deployment options
OWASP Amass
ZeroFox External Cybersecurity
Deployment details
OWASP Amass
Self-Hosted; CLI; Container; CLI executable; Docker container; Go libraryZeroFox External Cybersecurity
Cloud SaaS; Cloud SaaS; Managed Disruption ServicesData residency
OWASP Amass
Local machine; Self-hostedZeroFox External Cybersecurity
United States; EUKey features
What it offers
OWASP Amass
- OSINT source scraping
- Active & passive DNS enumeration
- Graph database architecture
- ASN discovery
- Certificate transparency parsing
- External asset discovery
- Subdomain enumeration
- OSINT reconnaissance
ZeroFox External Cybersecurity
- Unified external attack surface management
- Digital risk protection
- Executive protection
- Automated takedowns
- Threat intelligence correlation
- Comprehensive external risk defense
- Dark web credential auditing
- Brand security
Platform & access
API access
OWASP Amass
API access: yesZeroFox External Cybersecurity
API access: yesSingle sign-on (SSO)
OWASP Amass
SSO: noZeroFox External Cybersecurity
SSO: yesRole-based access (RBAC)
OWASP Amass
RBAC: noZeroFox External Cybersecurity
RBAC: yesMulti-tenant
OWASP Amass
Multi-tenant: noZeroFox External Cybersecurity
Multi-tenant: yesMobile app
OWASP Amass
Mobile app: noZeroFox External Cybersecurity
Mobile app: yesSupported platforms
OWASP Amass
ZeroFox External Cybersecurity
Compliance
OWASP Amass
ZeroFox External Cybersecurity
Integrations & coverage
Integrations
OWASP Amass
ZeroFox External Cybersecurity
Industries
OWASP Amass
ZeroFox External Cybersecurity
Regions
OWASP Amass
ZeroFox External Cybersecurity
Vendor
Company
OWASP Amass
OWASPZeroFox External Cybersecurity
ZeroFoxHeadquarters
OWASP Amass
Global nonprofit organizationZeroFox External Cybersecurity
Baltimore, Maryland, USACompany size
OWASP Amass
11-50ZeroFox External Cybersecurity
500+Founded
OWASP Amass
2001ZeroFox External Cybersecurity
2013