The closest DorkSearch alternatives are ctlogs.dev, Aleph Search and Sn1per Professional 2026. Picking a DorkSearch alternative comes down to fit: External Attack Surface Management coverage, your environment, your integrations and your budget. So each option below shows what it covers, how it deploys, its pricing model and the company behind it.
46 alternativesClosest matches: ctlogs.dev, Aleph Search, Sn1per Professional 2026Page updated Nov 2026
The product
Curated Google dork search tool for OSINT and web reconnaissance.
Need the answer fast? Best Attack Surface Management Solutions for Business picks Palo Alto Networks Cortex Xpanse, Microsoft Defender EASM, Mandiant Attack Surface Management and 4 more.See the shortlist
DorkSearch is a free External Attack Surface Management solution. The closest matches by shared tags and NIST CSF 2.0 coverage are ctlogs.dev, Aleph Search, Sn1per Professional 2026, MGM Security Partners recon me, and Driftnet Explore. All 46 alternatives on this page are ranked the same way.
These 8 solutions overlap most with DorkSearch. Each row says what the product does and, when the overlap is big enough, which capabilities it shares.
Fast Certificate Transparency search and JSON API for subdomain reconnaissance.
Key features: Real-time Certificate Transparency Search, Automated Subdomain Enumeration, High-Performance REST JSON API, Wildcard & Fingerprint Matching, SSL/TLS Certificate History Tracking
View ctlogs.devctlogs.dev alternativesDorkSearch vs ctlogs.dev
OSINT tool for mapping & monitoring risk ecosystems on Clear & Deep Web.
Key features: 9 listed. See them on the Aleph Search page.
View Aleph SearchAleph Search alternativesDorkSearch vs Aleph Search
Sn1per Professional 2026: automated penetration testing & attack surface management
Key features: 10 listed. See them on the Sn1per Professional 2026 page.
View Sn1per Professional 2026Sn1per Professional 2026 alternativesDorkSearch vs Sn1per Professional 2026
recon me is an OSINT tool developed by mgm Security Partners and used as part of the company's OSINT analysis service. The tool collects and correlates publicly available information about an organization's external attack surface, including domains, subdomains, servers, technologies used, metadata, and publicly accessible files. It supports two scan modes: - Passive scan: queries public directory services such as Whois, DNS, and MX records to identify servers, subdomains, email addresses, technologies, and operators (e.g. Amazon, Akamai) without any interaction with target systems. - Active scan: directly examines the target domain without performing attacks, to identify additional services, technologies, or unintentionally exposed files. Results from recon me are combined with manual expert analysis and used to produce a report detailing identified assets, potential vulnerabilities, misconfigurations, and prioritized recommendations. The output is intended to give organizations a view of their public attack surface from an attacker's perspective and can serve as a basis for further security testing such as penetration tests.</description> <parameter name="summary">Proprietary OSINT tool for mapping an organization's public attack surface
Key features: 8 listed. See them on the MGM Security Partners recon me page.
Internet-wide scanning platform for discovering exposed devices, services
Key features: 10 listed. See them on the Driftnet Explore page.
View Driftnet ExploreDriftnet Explore alternativesDorkSearch vs Driftnet Explore
Continuous external attack surface monitoring that shows what changed between scans.
Key features: 9 listed. See them on the SurfaceDiff page.
View SurfaceDiffSurfaceDiff alternativesDorkSearch vs SurfaceDiff
Internet intelligence platform for asset discovery and attack surface mapping
Key features: 10 listed. See them on the Censys Attack Surface Management page.
View Censys Attack Surface ManagementCensys Attack Surface Management alternativesDorkSearch vs Censys Attack Surface Management
Automated ASM tool for multi-cloud environments with continuous asset discovery
Key features: 10 listed. See them on the Matos Automated Attack Surface Management page.
View Matos Automated Attack Surface ManagementMatos Automated Attack Surface Management alternativesDorkSearch vs Matos Automated Attack Surface Management
Fast Certificate Transparency search and JSON API for subdomain reconnaissance.
OSINT tool for mapping & monitoring risk ecosystems on Clear & Deep Web.
Sn1per Professional 2026: automated penetration testing & attack surface management
Internet-wide scanning platform for discovering exposed devices, services
Continuous external attack surface monitoring that shows what changed between scans.
Internet intelligence platform for asset discovery and attack surface mapping
Automated ASM tool for multi-cloud environments with continuous asset discovery
Active attack surface mgmt solution for discovering & remediating unknown risks
Internet-connected asset search engine with vulnerability scanning capabilities
EASM platform that discovers, attributes, and actively validates external assets and risks
External attack surface mapping service to discover exposed digital assets
External attack surface scanning for MSPs to identify vulnerabilities
Maps external attack surface including assets, dark web exposure, and leaks.
Passive pre-sale domain diagnostic tool for vCISOs, MSPs & MSSPs.
ASM platform for continuous discovery and risk validation of internet-exposed assets.
Agentless EASM platform for asset discovery, exposure mgmt & risk reduction.
AI-enhanced EASM platform for external attack surface discovery and monitoring.
Agentless external attack surface & dark web monitoring platform.
Human-validated external attack surface risk prioritization combining scanning
Independent security scoring and attestation for third-party managed web apps
Scans domains to discover attack surface, vulnerabilities, and generate hardening
Continuous external asset discovery and monitoring with daily domain scans.
AI-powered EASM platform for digital asset discovery and monitoring.
Continuous exposure detection & verification engine for attack surface mgmt.
Cloud platform for continuous visibility & mgmt of external attack surfaces
AI-powered attack surface management platform for cybersecurity monitoring
AI-powered platform for continuous attack surface discovery and pentesting
Discovers and monitors external-facing assets and vulnerabilities
External attack surface mgmt platform for discovering & monitoring assets
External attack surface management platform for discovering digital assets
SaaS platform for attack surface management and vulnerability detection
EASM platform for continuous monitoring of internet-exposed assets & vulnerabilities
Supply chain intelligence platform mapping digital ecosystems & proximity risks
Attack surface management platform for monitoring vulnerabilities and breaches
Discovers and manages internet-facing assets with vulnerability prioritization
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
External attack surface mgmt with automated pentesting and validation
SOCRadar Attack Surface Management is an EASM platform that continuously discovers, monitors, and assesses internet-facing digital assets for vulnerabilities and security risks.
External attack surface mgmt with asset discovery and on-demand pentesting
Passive asset discovery platform using Netflow data for attack surface mapping
External attack surface management platform for asset discovery and vuln mgmt
AI-driven EASM platform for discovering and monitoring external-facing assets
External attack surface management platform for asset discovery and risk detection
EASM platform with integrated CTI for asset discovery and vulnerability mgmt
Common questions when weighing alternatives to DorkSearch.
The closest matches to DorkSearch by shared tags and NIST CSF 2.0 coverage are ctlogs.dev, Aleph Search, Sn1per Professional 2026, MGM Security Partners recon me, and Driftnet Explore. All of them are External Attack Surface Management products.
This page shows 46 alternatives to DorkSearch, all in the External Attack Surface Management category. Each one is matched on shared tags and NIST CSF 2.0 areas, and the closest matches rank first.
DorkSearch is a free External Attack Surface Management product. You can use it at no cost. Only commercial alternatives are listed here. Free and open source products are under /free.
DorkSearch is a External Attack Surface Management product in the Exposure & Vulnerability Management category. You can compare it with the 46 other External Attack Surface Management products on this page.