AttackIQ Platform vs OWASP Amass
AttackIQ Platform
attackiq.comOWASP Amass
owasp.orgSide by side
| Figure | AttackIQ Platform | OWASP Amass |
|---|---|---|
| Price from | $4,995/mo | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 9 | 1 |
| Spec score · Attack Surface Management Software | 9.4 (#1) | 8.1 (#9) |
| Deployment | AttackIQ offers SaaS and on-premises software, and its federal solution is described as designed for on-premises operation. | The documentation describes installation from source, a project-maintained Homebrew package, official Docker image, and Docker Compose. |
| Founded | LinkedIn and Crunchbase list AttackIQ as founded in 2013. | 2001 |
| Integrations | Published integration materials name Microsoft 365, Palo Alto Panorama, ServiceNow, Splunk, Elastic, IBM QRadar, LogRhythm, Azure Sentinel, Okta, Qualys, Tenable and AWS-related services. | The project provides Docker and Docker Compose deployment options and documents configuring data sources with credentials. |
| Intended users | AttackIQ says it serves Fortune 500 enterprises, federal agencies, and MSSPs. | The project describes its framework as helping information security professionals map attack surfaces and discover external assets. |
| License | The Enterprise agreement grants a limited, non-exclusive license and identifies the AttackIQ Solution and Content Library as AttackIQ proprietary property. | The project page lists the Apache 2.0 license, and the repository notes that some subcomponents have separate licenses. |
| Purpose | AttackIQ describes its platform as a CTEM platform for modeling adversary behavior, prioritizing attack paths, validating controls, and measuring security improvement. | OWASP Amass is an open source framework for network mapping of attack surfaces and external asset discovery using OSINT and reconnaissance techniques. |
| Support | AttackIQ offers customer support through its portal, email, phone, a private Slack channel, knowledge base, and blueprints. | The project asks users needing installation or usage help to use its Discord server, where community members can help. |
Plans
AttackIQ Platform
- Flex FreeFree
- FreeFree
- Flex Pay-as-you-go$300, paid once
- Pay-as-you-go$300, paid once
- Flex Monthly$4,995 a month
- Monthly$4,995 a month
- AttackIQ EnterprisePriced on request
- Flex YearlyPrice not published
- YearlyPriced on request
In their own words
AttackIQ Platform
AttackIQ Platform has no write-up on Specifiction yet; its figures are above.
OWASP Amass
OWASP Amass is a free, open-source framework for mapping attack surfaces and discovering external assets using OSINT and reconnaissance. It combines a collection engine, an asset database, and the Open Asset Model, which describes internet-exposed assets and their types, properties, and relationships. Collection sources include APIs, certificates, DNS, routing, scraping, web archives, and WHOIS. The database can store, manage, and retrieve discoveries for long-term tracking. The project says its mapping covers physical and digital assets, going beyond basic subdomain enumeration. Installation options include building from source with Go, Homebrew, an official Docker image, and Docker Compose. The project lists Go, network connectivity, DNS resolution, and basic network reconnaissance knowledge as requirements. Amass runs on Linux, macOS, and Windows, with self-hosted deployment. The v5.1.1 release notes mention an initial version of the engine REST API. The project is an OWASP Flagship Project and lists Apache 2.0; some subcomponents have separate licenses. The software costs nothing.