macOS
Homebrewverified · 100%
brew install findomainlocal Homebrew formula metadata
brew
Install findomain with Homebrew, Nix, pacman
Cross-platform subdomain enumerator. Version 10.0.1 via Homebrew; verified 2026-06-22.
install
Additional install commands
Linux
Nixverified · 92%
nix profile install nixpkgs#findomainnixpkgs package indexes · pkgs/by-name/fi/findomain/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S findomainArch Linux sync databases · findomain · source: geo.mirror.pkgbuild.com
overview
Package summary
Cross-platform subdomain enumerator
Project links
Commands and aliases
- findomain
history
Project history and usage
Findomain is a Rust-based subdomain enumeration and reconnaissance tool for security testing, bug bounty work, and domain monitoring. Its official README presents it as a complete domain-recognition tool that combines Certificate Transparency logs, public APIs, optional API keys, resolution, screenshotting, port scanning, imports from other tools, and alerting integrations.
Project history
The public GitHub repository was created in April 2019, and its first GitHub release was tagged 0.1.2 later that month. The project quickly defined itself around speed and breadth rather than brute force alone: the README describes a CT-log and API-driven approach, with later feature growth around monitoring, webhooks, resolver behavior, and multiple output modes.
Findomain's implementation choice matters to packagers because the README emphasizes cross-platform Rust builds and official binaries for Linux, Windows, macOS, AArch64, ARMv7, NixOS, and Docker. That made it easy to distribute as a single CLI in security-focused environments.
Adoption history
Findomain's adoption is mostly in the offensive-security and reconnaissance niche. Its own documentation names Homebrew, pacman, Nix, Pentoo, Docker, and direct release downloads as installation paths, which fits a tool used from disposable workstations, CI-style monitoring jobs, and bug-bounty toolchains.
The project also added premium and monitoring-oriented features, such as webhook alerts, database-backed subdomain monitoring, and imports from other tools. That shifted it from a one-shot enumerator toward a small domain-observation workflow.
How it is used
Users run Findomain to discover subdomains from Certificate Transparency logs and public APIs, optionally resolve the results, write target-specific output files, import findings from other tools, and monitor for newly observed subdomains.
Because several sources require API tokens, Findomain usage ranges from zero-configuration public lookups to richer authenticated enumeration using providers such as VirusTotal, SecurityTrails, Facebook Certificate Transparency, and C99.
Why package nerds care
Findomain is package-interesting because it is a modern security CLI with the familiar shape of a single executable, but with a workflow that spans SaaS APIs, CT logs, local resolution, notifications, and optional persistence.
It also reflects a common pattern in security packaging: fast-moving niche tools become useful to package managers when they provide repeatable release artifacts and simple CLI installation, even if most of their culture lives in README examples rather than formal manuals.
Timeline
- 2019: Public GitHub repository is created.
- 2019: First GitHub release, 0.1.2, is published.
- 2020s: README documents monitoring, webhook alerts, imports, brute-force support, and multiple API integrations.
- 2026: Repository metadata shows continued maintenance activity.
Related projects
- Certificate Transparency logs are a primary data source for Findomain's enumeration strategy.
- crt.sh, Certspotter, VirusTotal, Sublist3r, SecurityTrails, urlscan.io, Threatminer, and related APIs are documented as data sources.
- Other subdomain enumeration tools are part of the same ecosystem because Findomain can import and work with data discovered by other tools.
Sources
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 8 platform targets.
- Installs with 1 runtime dependencies.
- Build metadata lists 2 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
findomain | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version10.0.1
manager updated2026-06-22
local dataok
upstreamcurrent
latest detected10.0.1
https://github.com/Findomain/Findomain
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:findomain |
|---|---|
| Version | 10.0.1 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/findomain |
| Homepage | https://github.com/Findomain/Findomain |
| Repository | https://github.com/Findomain/Findomain |
| Upstream docs | https://github.com/Findomain/Findomain#readme |
| License | GPL-3.0-or-later |
| Source archive | https://github.com/Findomain/Findomain/archive/refs/tags/10.0.1.tar.gz |
| Last updated | 2026-06-22T14:03:20-07:00 |
| Pulse | updated |
| Dependencies | openssl@3 |
| Build dependencies | pkgconf, rust |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | findomain |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
findomain
nix profile install nixpkgs#findomain- normalized package name match
- Matched by: Findomain
pacman95%
findomain 10.0.1-2
The fastest and cross-platform subdomain enumerator, do not waste your time
https://github.com/Findomain/Findomain
sudo pacman -S findomain- License: GPL-3.0-or-later
- Architecture: x86_64
- 3 dependencies
- 1 optional deps
- normalized package name match
- Matched by: Findomain
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment