# OWASP Amass

OWASP Amass is an External Attack Surface Management product. It runs on-premises. Pricing is free.

Performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.

Checked October 2026.

## What is OWASP Amass?

The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques. Information Gathering Techniques Used: Technique Data Sources APIs 360PassiveDNS, Ahrefs, AnubisDB, BeVigil, BinaryEdge, BufferOver, BuiltWith, C99, Chaos, CIRCL, DNSDB, DNSRepo, Deepinfo, Detectify, FOFA, FullHunt, GitHub, GitLab, GrepApp, Greynoise, HackerTarget, Hunter, IntelX, LeakIX, Maltiverse, Mnemonic, Netlas, Pastebin, PassiveTotal, PentestTools, Pulsedive, Quake, SOCRadar, Searchcode, Shodan, Spamhaus, Sublist3rAPI, SubdomainCenter, ThreatBook, ThreatMiner, URLScan, VirusTotal, Yandex, ZETAlytics, ZoomEye Certificates Active pulls (optional), Censys, CertCentral, CertSpotter, Crtsh, Digitorus, FacebookCT DNS Brute forcing, Reverse DNS sweeping, NSEC zone walking, Zone transfers, FQDN alterations/permutations, FQDN Similarity-based Guessing Routing ASNLookup, BGPTools, BGPView, BigDataCloud, IPdata, IPinfo, RADb, Robtex, ShadowServer, TeamCymru Scraping AbuseIPDB, Ask, Baidu, Bing, CSP Header, DNSDumpster, DNSHistory, DNSSpy, DuckDuckGo, Gists, Google, HackerOne, HyperStat, PKey, RapidDNS

Tags: Network Mapping, OSINT

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management) · [External Attack Surface Management](https://cybersectools.com/categories/external-asm)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 14,260
- Website: github.com

## Where it ranks

OWASP Amass is not a pick on the current [Best Attack Surface Management Solutions for Business](https://cybersectools.com/shortlists/best-attack-surface-solutions).

## OWASP Amass FAQ

### What is OWASP Amass?

OWASP Amass is a product in the External Attack Surface Management category. It covers Network Mapping and OSINT.

### What is the pricing for OWASP Amass?

OWASP Amass is free. Download and setup instructions are at https://github.com/owasp-amass/amass/.

### What are alternatives to OWASP Amass?

Alternatives to OWASP Amass listed on CybersecTools:

1. [ctlogs.dev](https://cybersectools.com/tools/ctlogsdev) - Fast Certificate Transparency search and JSON API for subdomain reconnaissance. (Commercial)
2. [Aleph Search](https://cybersectools.com/tools/aleph-search-clear) - OSINT tool for mapping & monitoring risk ecosystems on Clear & Deep Web. (Commercial)
3. [DarkInvader EASM Platform](https://cybersectools.com/tools/darkinvader-easm-platform) (Commercial)
4. [MGM Security Partners recon me](https://cybersectools.com/tools/mgm-security-partners-recon-me) (Commercial)
5. [Driftnet Explore](https://cybersectools.com/tools/driftnet-explore) - Internet-wide scanning platform for discovering exposed devices, services (Commercial)

Compare all OWASP Amass alternatives at [https://cybersectools.com/alternatives/owasp-amass](https://cybersectools.com/alternatives/owasp-amass)

### What deployment and organization size does OWASP Amass fit?

OWASP Amass is available as on-premises. It is listed for startup, smb, mid-market and enterprise organizations. It is free.

## Compare OWASP Amass with similar solutions

- [OWASP Amass vs ctlogs.dev](https://cybersectools.com/compare/ctlogsdev-vs-owasp-amass)
- [OWASP Amass vs Aleph Search](https://cybersectools.com/compare/aleph-search-clear-vs-owasp-amass)
- [OWASP Amass vs DarkInvader EASM Platform](https://cybersectools.com/compare/darkinvader-easm-platform-vs-owasp-amass)

All alternatives to OWASP Amass: [/alternatives/owasp-amass](https://cybersectools.com/alternatives/owasp-amass)

---

Source: https://cybersectools.com/tools/owasp-amass

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on OWASP Amass: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md