Check Point External Risk Management vs OWASP Amass
Check Point External Risk Management
checkpoint.comOWASP Amass
owasp.orgSide by side
| Figure | Check Point External Risk Management | OWASP Amass |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | — | Yes |
| Plans published | 2 | 1 |
| Spec score · Attack Surface Management Software | 7.8 (#11) | 8.1 (#9) |
| Deployment | The solution brief describes Infinity External Risk Management as an agentless, cloud-based SaaS solution that can be deployed within minutes. | The documentation describes installation from source, a project-maintained Homebrew package, official Docker image, and Docker Compose. |
| Founded | 1993 | 2001 |
| Intended users | The service page names CISOs, SOC managers, incident-response professionals, and red teams as relevant roles. | The project describes its framework as helping information security professionals map attack surfaces and discover external assets. |
| Purpose | External Risk Management continuously discovers external threats and vulnerabilities and provides contextual insight and active testing to reduce exposure. | OWASP Amass is an open source framework for network mapping of attack surfaces and external asset discovery using OSINT and reconnaissance techniques. |
| Support | The Essential and Advanced package sheets specify Direct Premium support SLA; the Essential sheet lists yearly customer-success-manager cadence and the Advanced sheet quarterly cadence. | The project asks users needing installation or usage help to use its Discord server, where community members can help. |
Plans
Check Point External Risk Management
- Infinity External Risk Management Advanced PackagePriced on request
- Infinity External Risk Management Essential PackagePriced on request
In their own words
Check Point External Risk Management
Check Point External Risk Management is a cloud-based service for discovering and reducing risks across an organization’s internet-facing assets. It identifies assets associated with brands, cloud environments, and suppliers, then analyzes vulnerabilities and misconfigurations, correlates them with threat intelligence, and scores and prioritizes risks. Continuous monitoring and recurring assessments aim to reveal new weaknesses and limit how long they remain exposed. Teams receive prioritized recommendations and a practical remediation and hardening roadmap, alongside a compliance and regulatory alignment review. Coverage combines threat intelligence, deep and dark web monitoring, external attack surface management, digital risk protection, and supply-chain intelligence. Check Point experts can provide investigations, threat reports, phishing-site and social-profile takedowns, red-team exercises, and attack simulations. The agentless SaaS service offers Essential and Advanced packages: Essential has one regular user, one integration, weekly scans, and 20 remediation coins; Advanced has three regular users, two integrations, daily scans, and 100 coins. Microsoft Sentinel integration can synchronize alerts and trigger SOAR playbooks. Pricing is on request.
OWASP Amass
OWASP Amass is a free, open-source framework for mapping attack surfaces and discovering external assets using OSINT and reconnaissance. It combines a collection engine, an asset database, and the Open Asset Model, which describes internet-exposed assets and their types, properties, and relationships. Collection sources include APIs, certificates, DNS, routing, scraping, web archives, and WHOIS. The database can store, manage, and retrieve discoveries for long-term tracking. The project says its mapping covers physical and digital assets, going beyond basic subdomain enumeration. Installation options include building from source with Go, Homebrew, an official Docker image, and Docker Compose. The project lists Go, network connectivity, DNS resolution, and basic network reconnaissance knowledge as requirements. Amass runs on Linux, macOS, and Windows, with self-hosted deployment. The v5.1.1 release notes mention an initial version of the engine REST API. The project is an OWASP Flagship Project and lists Apache 2.0; some subcomponents have separate licenses. The software costs nothing.