# Amass vs Detectify

**Leader by vioscaleAI score:** Detectify

| Attribute | Amass | Detectify |
|---|---|---|
| **vioscaleAI score** | 42.4 (27% (low)) | 53.4 (55% (medium)) |
| activity.commits_last_30d | 0 | - |
| adoption.dependent_repos | 0 | - |
| adoption.github_stars | 15,355 | - |
| content.faq | `[{"answer":"Amass is open source, so it can be self-hosted and used at no licence cost. Pricing changes often, so verify at source before relying on it.","source":"https://owasp.org/www-project-amass/","question":"Is Amass free to use?","confidence":0.6},{"answer":"Amass supports a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://owasp.org/www-project-amass/","question":"What platforms does Amass support?","confidence":0.6},{"answer":"Yes. Amass can be deployed self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://owasp.org/www-project-amass/","question":"Can Amass be self-hosted?","confidence":0.6}]` | `[{"answer":"A cloud-based security platform that continuously discovers, monitors, and tests your external attack surface across domains, applications, and APIs. Uses payload-based scanning, ethical hacker research, and AI-driven vulnerability testing to identify exploitable weaknesses before attackers can exploit them. It is indexed under Attack Surface Management.","source":"https://detectify.com","question":"What is Detectify?","confidence":0.6},{"answer":"Detectify offers a free tier, so you can start without paying. Paid plans start at €2500 per year. Prices are published openly on the vendor's own pricing page. Pricing changes often, so verify at source before relying on it.","source":"https://detectify.com/pricing","question":"Is Detectify free?","confidence":0.6},{"answer":"We have confirmed browser-based access to Detectify. That is the extent of what we could verify from public sources, so it may well offer desktop or mobile clients we have not indexed.","source":"https://detectify.com","question":"What platforms does Detectify support?","confidence":0.6},{"answer":"Yes. Detectify can be deployed cloud / SaaS and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://detectify.com","question":"Can Detectify be self-hosted?","confidence":0.6},{"answer":"We have confirmed 8 integrations for Detectify, including Jira, Slack, Okta, Ping Identity, OneLogin, SAML 2.0, AWS Marketplace and Workato. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://detectify.com/pricing","question":"What does Detectify integrate with?","confidence":0.6},{"answer":"We have independently confirmed ISO 27001 and GDPR for Detectify. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Detectify not holding them. Always confirm compliance directly before you rely on it.","source":"https://detectify.com/solutions/a-tool-for-continuous-compliance","question":"What security certifications does Detectify have?","confidence":0.7}]` |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"hybrid":true,"self_hosted":true}` |
| description.long | A framework that identifies external assets and attack surfaces through reconnaissance and open-source intelligence gathering techniques, helping security professionals understand their organization's external exposure. | Detectify performs continuous discovery and mapping of internet-facing assets combined with payload-based vulnerability testing to identify real exploitable security gaps across your external infrastructure. |
| features.capabilities | `{"pricing_model":"open_source","deployment_model":"standalone_cli","automated_asset_attribution":true,"agentless_external_discovery":true}` | `{"iso_27001":true,"pricing_model":"subscription_tier","deployment_model":"hybrid","cloud_cspm_integration":true,"continuous_daily_scanning":true,"cve_vulnerability_mapping":true,"jira_ticketing_integration":true,"automated_asset_attribution":true,"agentless_external_discovery":true}` |
| integrations.count | 83 | 18 |
| integrations.list | `[{"name":"GitHub","native":true,"direction":"inbound"},{"name":"GitLab","native":true,"direction":"inbound"},{"name":"Shodan","native":true,"direction":"inbound"},{"name":"Google","native":true,"direction":"inbound"},{"name":"Bing","native":true,"direction":"inbound"},{"name":"SecurityTrails","native":true,"direction":"inbound"},{"name":"Greynoise","native":true,"direction":"inbound"},{"name":"HackerOne","native":true,"direction":"inbound"}]` | `[{"name":"Jira"},{"name":"Slack"},{"name":"Okta"},{"name":"Ping Identity"},{"name":"OneLogin"},{"name":"SAML 2.0"},{"name":"AWS Marketplace"},{"name":"Workato"},{"name":"AWS","native":true,"category":"cloud","direction":"bidirectional"},{"name":"Azure","native":true,"category":"cloud","direction":"bidirectional"},{"name":"Cloudflare","native":true,"category":"cloud","direction":"bidirectional"},{"name":"GCP","native":true,"category":"cloud","direction":"bidirectional"},{"name":"Microsoft Teams","native":true,"category":"chat","direction":"outbound"},{"name":"ServiceNow","native":true,"category":"itsm","direction":"bidirectional"},{"name":"Splunk","native":true,"category":"siem","direction":"outbound"},{"name":"PagerDuty","native":true,"category":"incident_management","direction":"outbound"},{"name":"OpsGenie","native":true,"category":"incident_management","direction":"outbound"},{"name":"GoDaddy","native":true,"category":"dns","direction":"inbound"},{"name":"HTTP Webhooks","native":true,"direction":"outbound"},{"name":"Email","native":true,"category":"notifications","direction":"outbound"}]` |
| language.primary | Go | - |
| market.availability | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true}` | `{"cli":true,"web":true}` |
| pricing | `{"type":"quote","plans":[{"free":false,"name":"Silver Corporate Supporter","summary":"$5,000 annually (or $2,000 regional/startup)","components":[{"kind":"one_time","amount":5000,"currency":"USD"}],"description":"Logo placement, 1 annual social media campaign","contactSales":false},{"free":false,"name":"Gold Corporate Supporter","summary":"$15,000 annually (or $6,000 regional)","components":[{"kind":"one_time","amount":15000,"currency":"USD"}],"description":"2 annual social media campaigns, Global AppSec event slide exposure","contactSales":false},{"free":false,"name":"Platinum Corporate Supporter","summary":"$25,000 annually (or $10,000 regional)","components":[{"kind":"one_time","amount":25000,"currency":"USD"}],"description":"Maximum visibility, 4 annual social media campaigns, priority placement, sponsorship subsidy","contactSales":false}],"currency":"USD","sourceUrl":"https://owasp.org/www-project-amass/","retrievedAt":"2026-09-11T19:11:04.073Z","startingPrice":{"amount":5000,"currency":"USD"}}` | `{"type":"subscription","plans":[{"free":true,"name":"Starter","summary":"Free (up to 5 users, 1 team)","features":["API scanning (REST & GraphQL)","Standard integration templates","Email support"],"minSeats":1,"commitment":"annual","components":[{"kind":"fixed","amount":0,"period":"year","currency":"EUR"}],"description":"Great for developers and security researchers","contactSales":false,"includedLimits":{"teams":"1","users":"5"}},{"free":false,"name":"Standard","summary":"€2,500/year (up to 10 users)","features":["Up to 10 users","API scanning (REST & GraphQL)","Single sign-on (Okta, Ping Identity, OneLogin, SAML 2.0)","2 hours expert onboarding","Dedicated professional support"],"minSeats":1,"commitment":"annual","components":[{"kind":"fixed","amount":2500,"period":"year","currency":"EUR"}],"description":"For growing teams requiring advanced access controls and comprehensive API scanning","contactSales":false,"includedLimits":{"users":"10"}},{"free":false,"name":"Professional","summary":"€5,000/year (unlimited users, 2 teams)","features":["Unlimited users across 2 teams","CI/CD integration with internal scanning","Advanced discovery (IP ranges & apex domains)","All integrations access","White-labeled scan reports","5 hours hands-on onboarding","Dedicated customer success manager","Surface Monitoring with continuous asset discovery","Application Scanning"],"minSeats":1,"commitment":"annual","components":[{"kind":"fixed","amount":5000,"period":"year","currency":"EUR"}],"description":"For scaling operations requiring internal network visibility and automated CI/CD workflows","contactSales":false,"includedLimits":{"teams":"2","users":"unlimited","internal_environments":"1"}},{"free":false,"name":"Enterprise","summary":"€15,000+/year (unlimited users & teams)","features":["Unlimited users and teams","3 internal scanning agents included","Fully customized vulnerability tests and modules","Service level agreement (SLA)","Dedicated customer success manager and solutions engineer","15 hours tailored onboarding","Quarterly business reviews","Priority early access to new features","All Professional features"],"commitment":"annual","components":[{"kind":"fixed","amount":15000,"period":"year","currency":"EUR"}],"description":"Fully customizable solution for enterprise-scale security operations","contactSales":true,"includedLimits":{"teams":"unlimited","users":"unlimited","internal_environments":"3"}}],"addOns":[{"name":"PCI ASV Scanning","components":[{"kind":"fixed","amount":500,"period":"year","currency":"EUR"}]},{"name":"Additional domains (Surface Monitoring)"},{"name":"Additional application scan targets"},{"name":"Additional internal scanning environments"}],"summary":"Free tier available. Subscription plans from €2,500–€15,000 annually. 14-day free trial.","currency":"EUR","freeTier":true,"sourceUrl":"https://detectify.com/pricing","retrievedAt":"2026-08-25T08:38:56.955Z","freeTrialDays":14,"startingPrice":{"amount":2500,"period":"year","currency":"EUR"},"billingPeriods":["year","month"]}` |
| pricing.free_tier | yes | yes |
| pricing.model | open_source | freemium |
| pricing.price_level | free | high |
| pricing.starting_price | `{"amount":5000,"currency":"USD"}` | `{"amount":2500,"currency":"EUR"}` |
| pricing.transparent | yes | yes |
| release.cadence_days | 32 | - |
| release.history | `[{"url":"https://github.com/owasp-amass/amass/releases/tag/v5.1.1","date":"2026-04-07T02:08:08Z","type":"stable","version":"v5.1.1"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v5.0.1","date":"2025-09-04T20:54:12Z","type":"stable","version":"v5.0.1"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v5.0.0","date":"2025-08-03T15:31:46Z","type":"stable","version":"v5.0.0"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v4.2.0","date":"2023-09-10T20:52:27Z","type":"stable","version":"v4.2.0"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v4.1.0","date":"2023-07-29T02:37:39Z","type":"stable","version":"v4.1.0"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v4.0.4","date":"2023-07-25T19:36:18Z","type":"stable","version":"v4.0.4"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v4.0.3","date":"2023-07-24T04:47:39Z","type":"stable","version":"v4.0.3"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v4.0.2","date":"2023-07-20T21:01:46Z","type":"stable","version":"v4.0.2"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v4.0.1","date":"2023-07-20T01:16:08Z","type":"stable","version":"v4.0.1"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v3.23.3","date":"2023-06-20T22:10:49Z","type":"stable","version":"v3.23.3"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v3.23.2","date":"2023-05-09T15:54:52Z","type":"stable","version":"v3.23.2"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v3.22.2","date":"2023-03-21T03:48:13Z","type":"stable","version":"v3.22.2"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v3.22.1","date":"2023-03-14T03:41:56Z","type":"stable","version":"v3.22.1"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v3.22.0","date":"2023-03-08T01:26:11Z","type":"stable","version":"v3.22.0"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v3.21.2","date":"2022-12-11T19:21:26Z","type":"stable","version":"v3.21.2"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v3.21.1","date":"2022-12-09T07:29:22Z","type":"stable","version":"v3.21.1"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v3.21.0","date":"2022-12-09T07:11:23Z","type":"stable","version":"v3.21.0"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v3.20.0","date":"2022-09-23T05:04:27Z","type":"stable","version":"v3.20.0"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v3.19.3","date":"2022-06-23T22:43:35Z","type":"stable","version":"v3.19.3"},{"url":"https://github.com/owasp-amass/amass/releases/tag/v3.19.2","date":"2022-04-16T21:47:19Z","type":"stable","version":"v3.19.2"}]` | - |
| security.gdpr | - | yes |
| security.iso27001 | - | yes |
| security.pci | - | yes |
| security.scorecard | 3 | - |
| security.trust_center | https://owasp.org/blog/2024/03/07/OWASP-CycloneDX-is-ready-to-support-your-CRA-compliance-journey.html | https://detectify.com/solutions/a-tool-for-continuous-compliance |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fowasp-amass%2Famass%2Fv3%2Fnet%2Fhttp&per_page=100","last_12m":0,"max_severity":null}` | - |

## Capabilities (Attack Surface Management)

| Capability | Amass | Detectify |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | Standalone CLI | Hybrid |
| Continuous daily scanning | - | ✓ |
| Agentless external discovery | ✓ | ✓ |
| Automated asset attribution | ✓ | ✓ |
| Cloud cspm integration | - | ✓ |
| Certificate transparency monitoring | - | - |
| Dark web exposure monitoring | - | - |
| Servicenow CMDB sync | - | - |
| Jira ticketing integration | - | ✓ |
| Cve vulnerability mapping | - | ✓ |
| SOC2 type ii | - | - |
| ISO 27001 | - | ✓ |
| Pricing model | Open source | Subscription tier |

*Source: vioscaleAI. Generated 2026-10-16T18:59:07.566Z. "-" = undocumented, not absent.*