# OWASP Amass: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 8 judge labels across 1 category by 7 of 14 models. Page: https://www.gane.ai/index/it/vendors/owasp-amass

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Attack surface management](https://www.gane.ai/index/it/security/attack-surface-management/index.md) | 4% | 8 | 12% | 8 |

## What the models said for it

- "For very limited budgets, start with OWASP Amass combined with Attack Surface Monitor" (MiniMax M2.5, ASM)
- "Top Recommendation: OWASP Amass (Free and Open-Source)" (Grok 4.20, ASM)
- "The gold standard for external attack surface mapping, subdomain enumeration, and DNS discovery." (Gemini 3.5 Flash, ASM)
- "OWASP Amass + Nuclei for discovery and scanning" (Kimi K2, ASM)

## And against it

- "it's a framework—not a managed platform—so you'll need someone to operate it" (GPT-6 Luna, ASM)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 1 | 0 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 1 | 0 | 0 | 1 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 1 | 0 | 0 | 0 | 1 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 1 | 0 | 0 | 1 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 1 | 1 | 0 | 2 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 1 | 0 | 0 | 0 | 1 |
| GPT-6 Luna | 0 | 0 | 0 | 1 | 1 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named OWASP Amass, from 14 of the 16 answers that named it (only the models that return a source list).

### Domains cited

- attaxion.com: 9
- circleid.com: 7
- owasp.org: 7 (its own site)
- github.com: 6
- attacksurfacescan.com: 5
- g2.com: 5
- cyble.com: 4
- intellibreach.com: 3
- intruder.io: 3
- passwork.pro: 3

### Pages cited

- https://attaxion.com/top-external-attack-surface-management-vendors: 7
- https://circleid.com/posts/best-attack-surface-monitoring-tools: 7
- https://owasp.org/projects/amass: 7
- https://attaxion.com/open-source-attack-surface-management: 4
- https://cyble.com/knowledge-hub/top-attack-surface-management-services: 4
- https://github.com/topics/attack-surface-management: 3
- https://intellibreach.com/blog/best-attack-surface-management-tools-for-smbs: 3
- https://sn1persecurity.com/wordpress/open-source-self-hosted-attack-surface-management-tools: 3

## In its own words

What OWASP Amass's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.


## What it publishes

Every page owasp.org exposes, read 2026-09-29: 893 addresses. By kind, pages and the last 90 days:

- blog: 86 pages, 0 in the last 90 days, latest 2025-08-05
- webinar or virtual event: 7 pages, 0 in the last 90 days, latest 2026-05-13
- conference or event: 35 pages, 0 in the last 90 days, latest 2025-11-14
- template or tool: 3 pages, 0 in the last 90 days, latest 2024-05-08
- glossary or explainer: 1 pages, 0 in the last 90 days, latest undated
- podcast or video: 4 pages, 0 in the last 90 days, latest undated
- news or press: 18 pages, 0 in the last 90 days, latest 2024-11-20
- Recent: 2026-05-13 webinar or virtual event: Gen ai project application security risk virtual summit https://genai.owasp.org/event/gen-ai-project-application-security-risk-virtual-summit
- Recent: 2025-11-14 conference or event: Genai security project agentic ai summit europe https://genai.owasp.org/event/genai-security-project-agentic-ai-summit-europe
- Recent: 2025-08-30 conference or event: Genai security project uae summit hackathon https://genai.owasp.org/event/genai-security-project-uae-summit-hackathon
- Recent: 2025-08-28 conference or event: Owasp 2025 global appsec usa washington dc https://genai.owasp.org/event/owasp-2025-global-appsec-usa-washington-dc
- Recent: 2025-08-27 webinar or virtual event: Gen ai application security risk virtual conference https://genai.owasp.org/event/gen-ai-application-security-risk-virtual-conference
- Recent: 2025-08-06 webinar or virtual event: Owasp genai agentic security top 10 global kick off livestream https://genai.owasp.org/event/owasp-genai-agentic-security-top-10-global-kick-off-livestream

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.