# second-order

second-order is a Security Scanning product. It runs on-premises. Pricing is free.

Second-order subdomain takeover scanner

Checked October 2026.

## What is second-order?

Second-order subdomain takeover scanner

Second-order subdomain takeover scanner is a tool that helps in identifying subdomain takeover vulnerabilities.

Features:

* Scans for subdomain takeover vulnerabilities
* Identifies potential vulnerabilities
* Provides detailed reports

How it works:

1. Scan for subdomain takeover vulnerabilities
2. Identify potential vulnerabilities
3. Provide detailed reports

Why it's useful:

* Helps in identifying potential security vulnerabilities
* Helps in securing subdomains
* Helps in improving overall security posture

Get started:

1. Clone the repository
2. Run the script
3. Review the reports

License:

MIT License

Tags: Security Scanning, Subdomain Enumeration

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management) · [Security Scanning](https://cybersectools.com/categories/security-scanning)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 408
- Website: github.com

## second-order FAQ

### What is second-order?

second-order is a product in the Security Scanning category. It covers Security Scanning and Subdomain Enumeration.

### What is the pricing for second-order?

second-order is free. Download and setup instructions are at https://github.com/mhmdiaa/second-order/.

### What are alternatives to second-order?

Alternatives to second-order listed on CybersecTools:

1. [CyberChecker](https://cybersectools.com/tools/cyberchecker) - Automated web vulnerability scanner with 60+ security checks (Commercial)
2. [Domain Verity](https://cybersectools.com/tools/domain-verity) - Monitors domains for TLS, email auth, DNS, and cert misconfigurations. (Commercial)
3. [DNSAudit.io](https://cybersectools.com/tools/dnsauditio) - Free DNS security scanner that checks domains for misconfigs and exposure. (Free)
4. [Perisai Web Scanner](https://cybersectools.com/tools/bima-scanner) - Automated web scanner detecting vulnerabilities and HTTP security headers (Free)
5. [Website Privacy Test](https://cybersectools.com/tools/website-privacy-test) - Website privacy and security testing tool for cookie and third-party analysis (Free)

Compare all second-order alternatives at [https://cybersectools.com/alternatives/second-order](https://cybersectools.com/alternatives/second-order)

### What deployment and organization size does second-order fit?

second-order is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare second-order with similar solutions

- [second-order vs CyberChecker](https://cybersectools.com/compare/cyberchecker-vs-second-order)
- [second-order vs Domain Verity](https://cybersectools.com/compare/domain-verity-vs-second-order)
- [second-order vs DNSAudit.io](https://cybersectools.com/compare/dnsauditio-vs-second-order)

All alternatives to second-order: [/alternatives/second-order](https://cybersectools.com/alternatives/second-order)

---

Source: https://cybersectools.com/tools/second-order

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on second-order: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md