Skip to content

Back to the catalog

Submap
submap.nettool

Submap

SubMap is an enterprise-facing subdomain discovery and attack-surface-mapping SaaS that aggregates multiple reconnaissance data sources, streams results live via SSE, and exports to TXT/CSV/JSON for integration into a security workflow. It also runs 49 service fingerprints to detect subdomain-takeover conditions (dangling CNAMEs pointing at AWS, Azure, GitHub, Heroku, etc.) and layers in CVE monitors/alerting for tracked assets. The public page gates full scan output behind account creation, showing only the first 110 results in the free preview.

TL;DR Freemium subdomain-recon and attack-surface-mapping tool with built-in subdomain-takeover fingerprinting and CVE monitoring.

Technologies named here

  • SubMap
  • AWS
  • Azure
  • GitHub
  • Heroku

Techniques named here

  • Subdomain Takeover Detection
  • Subdomain discovery / attack surface mapping

Related in OSINT