01 · Product name
Findomain
GPL enumerator. 10.0.1 listed 44 names.
Published by Findomain.
In short
Findomain is the subdomain enumerator in Findomain/Findomain. On 17 Oct 2026 the GitHub API reported 3,792 stars and 397 forks. The license field was GPL-3.0. Release 10.0.1 was published on 28 Jul 2025. The homepage field is findomain.app, and that name did not resolve in DNS on the review date. The README says a premium version exists and does not print a price. A local run of 10.0.1 against owasp.org returned 44 names. That list is passive enumeration of a public organization, not proof of who operates each host.
Product pricing strategy
02
Free and paid
Findomain's free binary is what this listing ran. Release 10.0.1 is tagged 28 Jul 2025, and the Linux build printed that version on 17 Oct 2026. The README states that a premium version exists and that some features are absent from the free version. It does not print a premium price, a seat count, or a checkout. Do not invent one. findomain.app is the homepage field in the GitHub API and did not resolve on the review date, so it is not a pricing page you can cite. The install document in the repository is the source for the free binaries. Monitoring webhooks and the screenshot flag are described in the README. Whether each of those is inside the free binary or only in premium is a cell in the project's table. This listing does not restate that table from memory. The 84,110-name aol.com line is an old README benchmark, not a feature you are billed for.
Utility and features
03
Findomain's README describes subdomain discovery, screenshots, port checks, HTTP checks, imports from other tools, and monitoring alerts to Discord, Slack, or Telegram. A table on that page is explicitly about features in the premium version that are not in the free version. The only benchmark printed beside it is the project's own: 84,110 subdomains of aol.com in 5.515 seconds on a BlackArch virtual machine. That figure is the README's. It is not the run in this listing, and it is not a current timing. No premium dollar price is printed. Installation is documented in the repository, with binaries for Linux, Windows, macOS, AArch64, and ARMv7, plus NixOS and Docker. The doc says Chrome or Chromium is required only for the screenshot feature, and PostgreSQL is optional.
- Version 10.0.1. The tag was published 28 Jul 2025. The local binary printed findomain 10.0.1 on 17 Oct 2026.
- 44 names for owasp.org. A quiet local run with 20 threads exited 0. The output file has 44 lines. Two frames show that file.
- Premium, price unpublished. The README says a premium version exists. No dollar amount was on the pages that loaded. findomain.app did not resolve.
On 17 Oct 2026 this listing downloaded the Linux binary for tag 10.0.1 and ran `findomain --version`, which printed `findomain 10.0.1`. A quiet run, `findomain -t owasp.org -q --threads 20`, exited 0 and wrote 44 names. The file includes austin.owasp.org, cloud.owasp.org, www.owasp.org, cheatsheetseries.owasp.org, wiki.owasp.org, discourse.owasp.org, llm.owasp.org, lists.owasp.org, docs.owasp.org, and cornucopia.owasp.org. findomain.app had no DNS address that day. Cite the GitHub repository and the install doc, not the dead hostname. GPL-3.0 is the license field.
- 1
Install from the GitHub release or the repository's install doc. Do not send a reader to findomain.app until it resolves.
- 2
Check `findomain --version` before you cite 10.0.1.
- 3
Run a passive list only against a domain you are allowed to assess. This listing used owasp.org and kept the 44 names.
- 4
Treat each name as a lead. Resolve and attribute it before you claim who operates the host.
Caveats
04
A name in the 44-line owasp.org file is a subdomain the free binary reported on 17 Oct 2026. It is not proof the host is still serving, not proof of ownership, and not a map of every name the organization has. A second run can differ. The README's 5.515-second aol.com result used a different target, a different machine, and a different year. Do not cite it as the speed of the owasp.org run. This listing did not time that run.
findomain.app failing DNS means the marketing site was not available to check. Premium may have a price on a page that did not load. Until a page loads, the honest statement is that no dollar price was visible. The screenshot feature needs Chrome or Chromium, which this run did not use. PostgreSQL is optional and was not used. GPL-3.0 applies if you redistribute the binary. Passive enumeration of a public domain is not authorization to probe a private network.
Screenshots
05
Potential use cases
06
- A passive list is enough for a public organization you are allowed to assess. On 17 Oct 2026 the Linux binary of Findomain 10.0.1 printed that version, and `findomain -t owasp.org -q --threads 20` exited 0 with 44 names. The file includes cheatsheetseries.owasp.org, wiki.owasp.org, discourse.owasp.org, llm.owasp.org, and docs.owasp.org. Two frames in this listing show the start of the file and the line count. Compare that list with Amass or Subfinder if you need a second passive source. Do not treat a name as proof of who runs the host.
- A status report repeats the README's speed claim. The README's table says Findomain found 84,110 aol.com subdomains in 5.515 seconds on a BlackArch virtual machine. That is the project's benchmark, on a different domain, in a different year. The owasp.org run in this listing was not timed. Cite 44 names if you mean 17 Oct 2026, and cite the README line only as the README line. The API that day reported 3,792 stars and 397 forks.
- Someone links findomain.app as the product site. The GitHub homepage field is that hostname, and it did not resolve on 17 Oct 2026. Send readers to github.com/Findomain/Findomain and to the install document in the repository. The README says a premium version has features the free version lacks, and it does not print a price. Release 10.0.1 was published 28 Jul 2025. GPL-3.0 is the license field. Chrome is required only if you use the screenshot feature, which this run did not.
Hard cases
The case where the first result is easy to over-read.
The premium price is filled in from memory
No dollar amount was visible on the README or the release, and the hostname in the homepage field did not resolve, so there was no pricing page to read. Write that the free 10.0.1 binary is what ran and that premium is named but unpriced. If a later page loads and prints a fee, cite that page and its date. Do not convert the old aol.com timing into a service level. PostgreSQL was not part of this run.
Practitioners using it
Posts on X from people describing a concrete use. The quote is the post. Likes and reposts are the counts saved with it, not a live total. A label marks a creator, a maintainer, a data partner, or an investor.
Day 1 / 30 — SUBDOMAIN ENUMERATION STACK Don't rely on one tool. Stack them. The bug lives in the sub only one tool found. Tools: → subfinder — https://t.co/SZ5CSRym6q → amass — https://t.co/73SoQ4ySp7 → assetfinder — https://t.co/81fmMvp8zk → findomain —… pic.twitter.com/EatgbAh4RM
burp suite. gau, linkfinder, amass, subfinder, assetfinder, findomain, qsreplace, ffuf, httpx, massdns, puredns, dnsgen, masscan, etc
Most hunters run tools. Few orchestrate them properly. I use subScraper like this: 👉 https://t.co/fHiR4LAa2t 1️⃣ Subdomain expansion first Amass → Subfinder → Assetfinder → Findomain 2️⃣ Probe everything with httpx Status, titles, tech stack, IPs, CDN. 3️⃣ Screenshot all live…
Guys, great content about automated enumeration of subdomains, a collection of tools (subfinder, assetfinder, amass, findomain, crobat, waybackurls, github-subdomains, Anubis, gauplus, and mildew). I recommend reading 🔥 https://t.co/y7VEmIghTR #bugbounty #bugbountytips #recon
Questions
Is Findomain free?
The 10.0.1 binary this listing ran is the free build. The README says a premium version exists and does not print its price.
How many owasp.org names did Findomain return?
On 17 Oct 2026, Findomain 10.0.1 in quiet mode wrote 44 names for owasp.org. That count is this run, not the README's aol.com benchmark.
Citations
07
Titled sources. These public pages are what the quotes on this listing come from.
Product
Findomain repository
https://github.com/Findomain/FindomainDocumentation
Findomain installation
https://github.com/Findomain/Findomain/blob/master/docs/INSTALLATION.md