Awesome Attack Surface Monitoring

Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.

Free and Open Source in Alphabetical Order

I've put a * next to a small number of my favorite ASMs!

• archerysec *
• AttackSurfaceMapper
• axiom *
• CloudFrontier
• Coalitioninc
• crossfeed *
• django DefectDojo *
• docker_offensive_elk
• eReKon
• faraday *
• Findomain *
• envizon
• hakluke's open source asm with spiderfoot*
• intrigue-core
• IVRE *
• jok3r framework
• Monitorizer
• natlas *
• Osmedeus *
• ReconNess
• ReconPi
• reNgine *
• Rumble.run *
• sn0int
• SonarSearch
• sublert

Paid in Alphabetical Order

• Assetnote
• BinaryEdge Attack Surface Monitoring *
• Censys Attack Surface Management *
• Detectify Asset Monitoring & Deep Scan *
• RedHunt Labs Attack Surface Management - (NVADR)
• RiskIQ
• Rumble.run *
• SecurityTrails Attack Surface Reduction *