IN THE FIELD GUIDE
subdomainsfinder
subdomainsfinder.com
SubDomains Finder is a browser-based OSINT tool that discovers all known subdomains of any domain using public data sources without active scanning. It provides details such as IP addresses, open ports, ASN, hosting provider, and CVE mapping instantly without installation or API keys.
THE PRODUCT, BEYOND THE PITCH
Editorially reviewed · Sources checked Sep 12, 2026
A good fit for
- Security teams auditing their own exposure and sysadmins tracking shadow IT assets
Know the limitations
- Does not perform active scanning or probing; relies solely on cached public data
- Some subdomains may be missing if they are new, behind firewalls, use wildcard DNS, or never indexed
What you can do
- Penetration testers use it during reconnaissance to map attack surfaces
- Bug bounty hunters use it to map attack surfaces for vulnerabilities
Features
- Subdomain discovery with associated IP addresses and ASN information
- Open ports and detected services per subdomain
- CVE mapping to identify known vulnerabilities related to detected software
Integrations
Not confirmed yet.
Platforms & data export
Not confirmed yet.
THE COST FOR YOUR TEAM
Go beyond the starting price.
Published plan prices for your team size and usage. Results update as you type. Taxes, currency conversion and unlisted add-ons are excluded, and anything the source did not state is called out rather than guessed.
Known monthly subtotal
$0.00/month
1 of 1 tools could not be priced with these inputs, so this is not the full cost.
| Tool / plan | Monthly | Per year | What this assumes |
|---|---|---|---|
| No pricing recorded yet. Check the official site, or ask the owner to add it. | |||
A practical workflow
- Enter a root domain to query aggregated public data sources for subdomains
- Receive instant results showing subdomains, IPs, ASN, open ports, and CVEs
- Use the data to map the attack surface or audit exposure without installing software or using command line
Based on the sources below. Editorial review does not imply hands-on product testing.
Alternatives to explore
Filter alternatives →Candidates based on category and primary feature. Check feature and pricing differences before switching.
Plan a switch from subdomainsfinder →What changed
Changes to the facts recorded here, not a live scan of every vendor update. Save this tool to follow updates in your account.
No changes recorded yet.