OWASP Amass
by OWASPVerified
OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives.
- Product Type
- Open-Source Network Mapping & Attack Surface Discovery Tool
- Deployment
- On-Premise
- Industries
- 4+ industries
- Regions
- Global
- Free Trial
- Yes
- Pricing
- Contact Vendor
About OWASP Amass
Built by OWASP, OWASP Amass is an Open-Source network mapping & attack surface discovery tool focused on attack surface management, asset discovery and network discovery. Its main capabilities are OSINT source scraping, active & passive DNS enumeration, graph database architecture, ASN discovery and certificate transparency parsing. It is used by organizations in security researchers, penetration testers, AppSec teams and enterprise IT.
Categories & Subcategories
Categories
Subcategories
Where OWASP Amass is ranked
Featured in 2 Cyber Rank rankings.
Key Features
5 capabilities that OWASP Amass offers.
Active & passive DNS enumeration
Graph database architecture
ASN discovery
Certificate transparency parsing
Use Cases
External asset discovery
Subdomain enumeration
OSINT reconnaissance
Penetration testing scoping
Industries Served
OWASP Amass is used across 4+ industries.
Security Researchers
Penetration Testers
AppSec Teams
Enterprise IT
Regions
Global
Integrations
Works with the tools teams already use
Neo4j
PostgreSQL
Maltego
Docker
OWASP ZAP
Deployment Options
Flexible deployment to meet your needs
On-Premise
Platform & Access
What OWASP Amass supports, at a glance.
- API accessYes
- Single sign-on (SSO)No
- Role-based access (RBAC)No
- Multi-tenantNo
- Mobile appNo
Security & Compliance
Standards, regulations, and frameworks this product aligns with.
Open-source Apache 2.0OWASP Project Standards
- Supported platforms
- LinuxmacOSWindowsDocker
- Operating systems
- LinuxmacOSWindowsBSD
- Browser support
- Not applicable (CLI tool)
- Languages supported
- English
- Data residency
- Local machine; Self-hosted
- Deployment details
- Self-Hosted; CLI; Container; CLI executable; Docker container; Go library
OWASP Amass Reviews
No reviews yet
Be the first to share your experience with OWASP Amass.
More Products from OWASP
View all →OWASP Dependency-Check
OWASP Dependency-Check: automated CVE identification, multi-language dependency support and NVD sync. Built for open-source component scanning. Compare SCA alternatives.
OWASP ZAP
OWASP ZAP from OWASP focuses on API security testing. Key capabilities: REST API control. Compare it with the leading Application Security Testing alternatives.
Product Resources
No public resources listed yet.
Explore More Products
Other cybersecurity products listed on Cyber Rank.
Subfinder
Subfinder is a passive subdomain enumeration tool used for Web Discovery. Highlights include fast DNS enumeration. Compare it with other Attack Surface Management tools.
Vulnerability & Exposure ManagementView details
Outpost24 Sweepatic
Outpost24 Sweepatic: autonomous asset discovery and digital footprint mapping. Built for shadow IT perimeter discovery. Compare Asset Discovery alternatives.
Vulnerability & Exposure ManagementView details
Tenable Attack Surface Management
byTenable
Tenable Attack Surface Management: open port alerts and Tenable One sync. Built for shadow IT elimination. Compare Attack Surface Management alternatives.
Vulnerability & Exposure ManagementView details
ProjectDiscovery Cloud Platform
ProjectDiscovery Cloud Platform offers external asset discovery and Continuous Nuclei scanning. Use it for Security Testing. See Attack Surface Management alternatives.
Vulnerability & Exposure ManagementView details