Amass vs Detectify
On the evidence we track, Detectify leads this comparison with a composite score of 53/100. Scores are only directly comparable because these tools share a category; the full breakdown and every source is below.
Capabilities
Feature-by-feature on the axes that matter for attack surface management. “-” means undocumented, not absent.
What each one is
The product in its own terms, so the numbers below have context.
Amass
A framework that identifies external assets and attack surfaces through reconnaissance and open-source intelligence gathering techniques, helping security professionals understand their organization's external exposure.
Detectify
LeaderDetectify performs continuous discovery and mapping of internet-facing assets combined with payload-based vulnerability testing to identify real exploitable security gaps across your external infrastructure.
Pricing
List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.
Amass
- Silver Corporate Supporter$5,000 annually (or $2,000 regional/startup)
- Gold Corporate Supporter$15,000 annually (or $6,000 regional)
- Platinum Corporate Supporter$25,000 annually (or $10,000 regional)
Detectify
LeaderFree tier available. Subscription plans from €2,500–€15,000 annually. 14-day free trial.
- StarterFree
- API scanning (REST & GraphQL)
- Standard integration templates
- Email support
- Standard€2,500/year (up to 10 users)
- Up to 10 users
- API scanning (REST & GraphQL)
- Single sign-on (Okta, Ping Identity, OneLogin, SAML 2.0)
- 2 hours expert onboarding
- Dedicated professional support
- Professional€5,000/year (unlimited users, 2 teams)
- Unlimited users across 2 teams
- CI/CD integration with internal scanning
- Advanced discovery (IP ranges & apex domains)
- All integrations access
- White-labeled scan reports
- +4 more
- EnterpriseContact sales
- Unlimited users and teams
- 3 internal scanning agents included
- Fully customized vulnerability tests and modules
- Service level agreement (SLA)
- Dedicated customer success manager and solutions engineer
- +4 more
Platform & deployment
Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.
Integrations
What each product connects to. Counts come from the vendor's own integration directory where one exists.
Amass
- GitHub
- GitLab
- Shodan
- Bing
- SecurityTrails
- Greynoise
- HackerOne
Detectify
Leader- Jira
- Slack
- Okta
- Ping Identity
- OneLogin
- SAML 2.0
- AWS Marketplace
- Workato
- AWS
- Azure
- Cloudflare
- GCP
- Microsoft Teams
- ServiceNow
- Splunk
- PagerDuty
- OpsGenie
- GoDaddy
- HTTP Webhooks
Amass or Detectify: which one depends on you
A composite score cannot know your constraints. Describe them and both get re-weighted against what you actually need, with the evidence behind every position.
Free to run, no account needed to start. How the evaluation works
Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.