# Install subfinder with Homebrew

Subdomain discovery tool. Version 2.14.0 via Homebrew; verified 2026-07-26.

## Install

```sh
sudo av install brew:subfinder
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install subfinder
```

  Evidence: provider-native install command

## Package facts

- **Package key:** brew:subfinder
- **Package manager:** Homebrew
- **Version:** 2.14.0
- **Source summary:** Subdomain discovery tool
- **Homepage:** <https://projectdiscovery.io>
- **Repository:** <https://github.com/projectdiscovery/subfinder>
- **Last updated:** 2026-07-26T04:03:47+02:00
- **Generated:** 2026-08-03T00:40:33+00:00

## Executables

- subfinder (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 2.14.0
## Project history and usage

subfinder is ProjectDiscovery's passive subdomain-enumeration CLI. The official docs describe it as a tool that finds valid subdomains using passive online sources, with a modular architecture optimized for speed, stealth, and integration into penetration-testing and bug-bounty workflows.

### Project history

Official Git tags in the ProjectDiscovery repository show public releases beginning in 2018, with v2-era tags appearing by late 2019 and continued v2 releases through 2026. The README frames the project as a single-purpose tool: passive subdomain enumeration that respects source licenses and usage restrictions.

### Adoption history

The install docs document Go, Homebrew, Docker, GitHub source builds, and downloadable binaries. The input package-manager facts additionally list Homebrew, DNF, Nix, and zypper, showing the tool's spread across security-tool packaging channels.

### How it is used

Typical usage is `subfinder -d example.com` or feeding domain lists, choosing passive sources, writing JSONL or text output, and using stdin/stdout in larger reconnaissance pipelines. Its docs also emphasize post-install provider configuration because many passive sources require API keys.

### Why package nerds care

subfinder matters in package-manager culture because ProjectDiscovery tools are often installed as a suite of composable Go CLIs. Packagers care about its static-binary-friendly Go distribution, Docker image, Homebrew formula, config and credential paths, and compatibility with automation-heavy security workflows.

### Timeline

- 2018-05-01: Earliest official repository tags include v0.1 and v0.1.1.
- 2018-06-26: Official repository tag 1.0 created.
- 2019-12-05: Official repository tag v2.0 created.
- 2026-04-25: Official repository tag v2.14.0 created.

### Related projects

- The official docs place subfinder within ProjectDiscovery's open-source security-tool family, alongside tools such as httpx, nuclei, naabu, katana, notify, uncover, and the ProjectDiscovery Tool Manager.

### Sources

- Official git tag dates from https://github.com/projectdiscovery/subfinder.git
- <https://docs.projectdiscovery.io/opensource/subfinder/install.md>
- <https://docs.projectdiscovery.io/opensource/subfinder/overview.md>
- <https://raw.githubusercontent.com/projectdiscovery/subfinder/dev/README.md>
- input source_facts.package-manager


## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: $CONFIG/subfinder/config.yaml, ~/.config/subfinder/config.yaml

## Credential files

- Unix: $CONFIG/subfinder/provider-config.yaml, ~/.config/subfinder/provider-config.yaml

## Combined YAML source

View the package source record on GitHub. [combined/subfinder.yml](https://github.com/automic-vault/db/blob/main/combined/subfinder.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation