surfacemap
Maps one authorized web origin's attack surface: hosts, technologies, routes, parameters, identities and trust boundaries, delivered as an evidenced, ranked hand-over document before a single payload is sent. Client-side JavaScript analysis is the engine underneath. For authorized security testing only.
Details
- External ID
- 1372822560
- Source
- GITHUB
- Company
- —
- Product
- surfacemap
- Website domain
- armourinfosec.com
- Launched
- Sept. 16, 2026
- Cohort
- —
- Upvotes
- 9
- Upvotes percentile
- 0.21822956699974377
- Tags
- —
- Fetched at
- Sept. 20, 2026, 5:45 p.m.
- Updated at
- Sept. 20, 2026, 5:45 p.m.
Enrichment
- Theme
- developer infrastructure and monitoring utilities
- Vertical
- Security
- Function
- Dev tools
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Hobby / open-source project
- Normalized one-liner
- attack surface mapping tool for security testers
- Manually corrected
- False
Could you build this?
Partial The report generation and surface mapping UI are straightforward, but performing accurate static and dynamic AST analysis of obfuscated client-side JavaScript to extract routes, APIs, and auth boundaries requires sophisticated security analysis tooling.
What it would actually take: The stack needs a headless browser cluster (Playwright/Puppeteer) capturing network requests and DOM states, coupled with JS AST parsing/dataflow analysis (Babel/Tree-sitter/ESLint engines) to identify hidden endpoints, GraphQL queries, and parameter schemas. The hard part is handling minified, bundled webpack/vite code with robust deobfuscation and heuristic risk ranking without triggering false positives.
Competitors
Other products that read as similar to this one — 29 launches clear the similarity bar, closest 8 shown.
Attention rank: #26 of 30 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 215 days after the earliest competitor.
- Secorvia · ph · 2026-09-12 · 1 upvotes · similarity 0.39
- WebKeeper · ph · 2026-09-18 · 2 upvotes · similarity 0.39
- UI-Atlas · ph · 2026-09-09 · 18 upvotes · similarity 0.39
- strata · github · 2026-09-11 · 20 upvotes · similarity 0.37
- Fingerprinting browser-impersonating bots w/o JavaScript (open spec) · hn · 2026-03-31 · 6 upvotes · similarity 0.36
- OriginProof Pro · ph · 2026-09-25 · 1 upvotes · similarity 0.36
- OASM · ph · 2026-09-24 · 2 upvotes · similarity 0.36
- DNSMint · ph · 2026-09-18 · 2 upvotes · similarity 0.35
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a dev tools tool for Sales yet.