Performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
Checked October 2026.
The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques. Information Gathering Techniques Used: Technique Data Sources APIs 360PassiveDNS, Ahrefs, AnubisDB, BeVigil, BinaryEdge, BufferOver, BuiltWith, C99, Chaos, CIRCL, DNSDB, DNSRepo, Deepinfo, Detectify, FOFA, FullHunt, GitHub, GitLab, GrepApp, Greynoise, HackerTarget, Hunter, IntelX, LeakIX, Maltiverse, Mnemonic, Netlas, Pastebin, PassiveTotal, PentestTools, Pulsedive, Quake, SOCRadar, Searchcode, Shodan, Spamhaus, Sublist3rAPI, SubdomainCenter, ThreatBook, ThreatMiner, URLScan, VirusTotal, Yandex, ZETAlytics, ZoomEye Certificates Active pulls (optional), Censys, CertCentral, CertSpotter, Crtsh, Digitorus, FacebookCT DNS Brute forcing, Reverse DNS sweeping, NSEC zone walking, Zone transfers, FQDN alterations/permutations, FQDN Similarity-based Guessing Routing ASNLookup, BGPTools, BGPView, BigDataCloud, IPdata, IPinfo, RADb, Robtex, ShadowServer, TeamCymru Scraping AbuseIPDB, Ask, Baidu, Bing, CSP Header, DNSDumpster, DNSHistory, DNSSpy, DuckDuckGo, Gists, Google, HackerOne, HyperStat, PKey, RapidDNS
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about OWASP Amass: features, pricing and alternatives.
OWASP Amass is a product in the External Attack Surface Management category. It covers Network Mapping and OSINT.
OWASP Amass is free. Download and setup instructions are at https://github.com/owasp-amass/amass/.
Alternatives to OWASP Amass listed on CybersecTools:
Compare all OWASP Amass alternatives at https://cybersectools.com/alternatives/owasp-amass
OWASP Amass is available as on-premises. It is listed for startup, smb, mid-market and enterprise organizations. It is free.
Side by side: features, pricing model and the company behind each one.
EASM platform with continuous asset discovery and threat intelligence context
EASM platform combined with PTaaS for web app discovery and testing
Cloud platform for continuous visibility & mgmt of external attack surfaces
Active attack surface mgmt solution for discovering & remediating unknown risks
External attack surface mgmt with automated pentesting and validation
On our shortlist?
OWASP Amass is not a pick on the current Best Attack Surface Management Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,029 products.
Connect your AI
