# dom-red

dom-red is a Security Scanning product. It runs on-premises. Pricing is free.

A command-line script that tests multiple domains from a list for open redirect vulnerabilities and reports findings.

Checked October 2026.

## What is dom-red?

dom-red is a command-line script designed to test multiple domains for open redirect vulnerabilities.

The tool accepts a list of domains as input and systematically checks each one for potential open redirect security flaws. Open redirect vulnerabilities occur when a web application accepts user-controlled input that specifies a link to an external site, potentially allowing attackers to redirect users to malicious websites.

The script operates from the command line interface, making it suitable for integration into automated security testing workflows. It processes domain lists in batch mode, enabling security professionals to efficiently assess multiple targets for this specific vulnerability type.

Upon completion of its scanning process, dom-red reports any identified open redirect vulnerabilities found across the tested domains. This functionality makes it useful for security assessments, penetration testing activities, and routine vulnerability scanning operations.

Tags: Scanner, Open Redirect

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management) · [Security Scanning](https://cybersectools.com/categories/security-scanning)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 28
- Website: github.com

## dom-red FAQ

### What is dom-red?

dom-red is a product in the Security Scanning category. It covers Scanner and Open Redirect.

### What is the pricing for dom-red?

dom-red is free. Download and setup instructions are at https://github.com/Naategh/dom-red/.

### What are alternatives to dom-red?

Alternatives to dom-red listed on CybersecTools:

1. [Sekant Online Phishing Scanner](https://cybersectools.com/tools/sekant-online-phishing-scanner) - Web-based URL scanner that checks if a site is phishing or malicious. (Free)
2. [Jsmon 2.0](https://cybersectools.com/tools/jsmon-20) - JavaScript security scanner for detecting vulnerabilities in third-party scripts (Commercial)
3. [RoboShadow OWASP ZAP Vulnerability Scanner](https://cybersectools.com/tools/roboshadow-owasp-zap-vulnerability-scanner) - Web app & network vulnerability scanner integrating OWASP ZAP, Shodan & Nmap (Commercial)
4. [Aikido EOL Scanner](https://cybersectools.com/tools/aikido-eol-scanner) - Detects end-of-life and outdated software in code and containers (Commercial)
5. [Intruder XSS Scanner](https://cybersectools.com/tools/intruder-xss-scanner) - XSS vulnerability scanner for web apps and APIs with automated scanning (Commercial)

Compare all dom-red alternatives at [https://cybersectools.com/alternatives/dom-red](https://cybersectools.com/alternatives/dom-red)

### What deployment and organization size does dom-red fit?

dom-red is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare dom-red with similar solutions

- [dom-red vs Sekant Online Phishing Scanner](https://cybersectools.com/compare/dom-red-vs-sekant-online-phishing-scanner)
- [dom-red vs Jsmon 2.0](https://cybersectools.com/compare/dom-red-vs-jsmon-20)
- [dom-red vs RoboShadow OWASP ZAP Vulnerability Scanner](https://cybersectools.com/compare/dom-red-vs-roboshadow-owasp-zap-vulnerability-scanner)

All alternatives to dom-red: [/alternatives/dom-red](https://cybersectools.com/alternatives/dom-red)

---

Source: https://cybersectools.com/tools/dom-red

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on dom-red: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md