# cariddi

cariddi is a Security Scanning product. It runs on-premises. Pricing is free.

An automated reconnaissance tool that crawls domains to discover URLs and scan for exposed secrets, API keys, and sensitive files during security assessments.

Checked October 2026.

## What is cariddi?

Cariddi is an automated reconnaissance tool that performs comprehensive crawling and scanning of target domains to identify security-relevant information.

The tool accepts domain lists as input and systematically discovers URLs while scanning for exposed secrets, API keys, authentication tokens, and sensitive files. It automates endpoint discovery by examining web applications and their associated resources to identify potential security misconfigurations.

Cariddi searches for files with specific extensions that commonly contain sensitive data and detects various patterns associated with security vulnerabilities. The tool provides automated secret detection capabilities that help identify areas of concern during security assessments.

The scanning functionality includes systematic examination of web applications to discover attack vectors and security weaknesses. It performs pattern matching to locate authentication credentials and other sensitive information that may be inadvertently exposed.

Tags: Enumeration, Reconnaissance, Scanner, Secret Detection

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management) · [Security Scanning](https://cybersectools.com/categories/security-scanning)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 2,736
- Website: github.com

## cariddi FAQ

### What is cariddi?

cariddi is a product in the Security Scanning category. It covers Enumeration, Reconnaissance and Scanner.

### What is the pricing for cariddi?

cariddi is free. Download and setup instructions are at https://github.com/edoardottt/cariddi/.

### What are alternatives to cariddi?

Alternatives to cariddi listed on CybersecTools:

1. [Jsmon 2.0](https://cybersectools.com/tools/jsmon-20) - JavaScript security scanner for detecting vulnerabilities in third-party scripts (Commercial)
2. [DNSAudit.io](https://cybersectools.com/tools/dnsauditio) - Free DNS security scanner that checks domains for misconfigs and exposure. (Free)
3. [Sekant Online Phishing Scanner](https://cybersectools.com/tools/sekant-online-phishing-scanner) - Web-based URL scanner that checks if a site is phishing or malicious. (Free)
4. [RoboShadow OWASP ZAP Vulnerability Scanner](https://cybersectools.com/tools/roboshadow-owasp-zap-vulnerability-scanner) - Web app & network vulnerability scanner integrating OWASP ZAP, Shodan & Nmap (Commercial)
5. [Aikido EOL Scanner](https://cybersectools.com/tools/aikido-eol-scanner) - Detects end-of-life and outdated software in code and containers (Commercial)

Compare all cariddi alternatives at [https://cybersectools.com/alternatives/cariddi](https://cybersectools.com/alternatives/cariddi)

### What deployment and organization size does cariddi fit?

cariddi is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare cariddi with similar solutions

- [cariddi vs Jsmon 2.0](https://cybersectools.com/compare/cariddi-vs-jsmon-20)
- [cariddi vs DNSAudit.io](https://cybersectools.com/compare/cariddi-vs-dnsauditio)
- [cariddi vs Sekant Online Phishing Scanner](https://cybersectools.com/compare/cariddi-vs-sekant-online-phishing-scanner)

All alternatives to cariddi: [/alternatives/cariddi](https://cybersectools.com/alternatives/cariddi)

---

Source: https://cybersectools.com/tools/cariddi

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on cariddi: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md