Development & InfrastructureFree

OWASP Amass

Map an authorised organisation's external attack surface and relationships.

Visit OWASP Amass ↗
Free

What’s included for free?

The command-line framework is ongoing-free under the repository licence with no provider discovery quota; data sources and infrastructure are separate.

Where it runs: Self-hosted

Provider information ↗Checked 2026-11-01

Before you use it

Review the repository licence and each external data source before redistribution or commercial use.

Provider terms can change. Check current pricing and usage rights before starting a project.

Explore more free tools →

SPONSORED · THE DIGITAL ACADEMYSearch your site. See what you might need.

Start with a TDA website audit to find your next useful improvement.