An automated reconnaissance tool that crawls domains to discover URLs and scan for exposed secrets, API keys, and sensitive files during security assessments.
Checked October 2026.
Cariddi is an automated reconnaissance tool that performs comprehensive crawling and scanning of target domains to identify security-relevant information.
The tool accepts domain lists as input and systematically discovers URLs while scanning for exposed secrets, API keys, authentication tokens, and sensitive files. It automates endpoint discovery by examining web applications and their associated resources to identify potential security misconfigurations.
Cariddi searches for files with specific extensions that commonly contain sensitive data and detects various patterns associated with security vulnerabilities. The tool provides automated secret detection capabilities that help identify areas of concern during security assessments.
The scanning functionality includes systematic examination of web applications to discover attack vectors and security weaknesses. It performs pattern matching to locate authentication credentials and other sensitive information that may be inadvertently exposed.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about cariddi: features, pricing and alternatives.
cariddi is a product in the Security Scanning category. It covers Enumeration, Reconnaissance and Scanner.
cariddi is free. Download and setup instructions are at https://github.com/edoardottt/cariddi/.
Alternatives to cariddi listed on CybersecTools:
Compare all cariddi alternatives at https://cybersectools.com/alternatives/cariddi
cariddi is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A hosted web application security testing tool that enables security researchers to register, activate their accounts, and scan web applications for vulnerabilities.
Free URL scanner that checks links for malware, phishing, and fraud threats
BlackWidow is a Python-based web application scanner that combines OSINT gathering with automated fuzzing to identify OWASP vulnerabilities in target websites.
CFRipper is a security analyzer for AWS CloudFormation templates that identifies vulnerabilities and misconfigurations before cloud deployment.
A Node.js tool that analyzes HTTP security headers on websites to identify missing or problematic security configurations.
CloudFrunt identifies misconfigured Amazon CloudFront domains that are vulnerable to hijacking due to improper CNAME configuration.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,023 products.
Connect your AI
