CheckOps home

Tools directory

O

CheckOps

OWASP Amass

OWASP Amass is an Apache-2.0 tool for in-depth attack surface mapping and external asset discovery using open-source intelligence and active techniques.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

OWASP Amass performs in-depth attack surface mapping and asset discovery. Security teams use it to find domains, subdomains and related infrastructure an organisation exposes, combining data sources and active techniques.

The source code is at owasp-amass/amass on GitHub under the Apache-2.0 licence, with about 15,500 stars; the most recent commit was on 11 November 2026.

Features

  1. Subdomain enumeration: Many data sources.
  2. Active techniques: DNS resolution, brute forcing and more.
  3. Graph database: Store and track discoveries.
  4. Visualisation: Explore relationships; see docs.
  5. OWASP project: Community-governed.

Pros

  1. Free to use: Open source under Apache-2.0.
  2. Maintained: Commits as recent as 11 November 2026.
  3. Community: About 15,500 GitHub stars.

Cons

  1. Authorised use only: Active techniques need permission.
  2. API keys: Best results require data-source API keys.
amass enum -d example.com

Resources:

Pricing

OWASP Amass is free and open source under the Apache-2.0 licence.

  1. Security teams mapping their external attack surface.
  2. Bug bounty hunters within scope.
  3. Not a fit for application-level testing.

Conclusion

Amass is the go-to open-source tool for attack surface discovery.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with OWASP Amass side by side.