anubisdb.com

What It Is

Anubis DB is a public API for subdomain enumeration, positioned as “free and open subdomain intelligence.” It lets users query known subdomains by root domain, and also submit newly discovered, cleaned, and validated subdomains via POST. It is mainly intended for security tools, reconnaissance workflows, and open contribution within the Anubis ecosystem.

Core Capabilities

Functionally, Anubis DB is deliberately minimal: its core resource is just /subdomains/:domain. A GET request returns the currently stored list of subdomains for a given root domain, while a POST request lets users submit a subdomains array to enrich the database. Responses are in JSON, and the legacy path /anubis/subdomains/:domain is also supported. The page provides JavaScript fetch examples, but since it is essentially an HTTP/JSON API, it can be integrated directly from other languages as well.

Technology and Ecosystem

The service runs on Cloudflare Workers and D1, emphasizing a lightweight, edge-native design with global accessibility. The project is explicitly open source, with a GitHub repository linked on the page, and notes that the Worker, D1 migrations, and import tools are available for review. It also mentions that Anubis can be used to write newly discovered subdomains into the database, suggesting that it is more of a foundational data component for security reconnaissance ecosystems than a full commercial intelligence platform.

Pricing and Documentation

In terms of pricing, the main text clearly describes it as a free, open API, with no mention of paid plans, usage quotas, enterprise tiers, or payment methods. The documentation is good enough for quick onboarding: endpoints, methods, and examples are all clearly presented. However, it still lacks several details needed for production use, including rate limits, authentication, error codes, data sources, update frequency, quality control, SLA, and abuse-handling policies.

Pros, Cons, and Best Fit

Its strengths are that it is free, open source, simple to use, and supports both reading and writing data. It is well suited to penetration testers, security researchers, OSINT tool developers, and asset discovery workflow integrations. Its drawbacks are the lack of information about support and stability, undisclosed data coverage and accuracy, and no official SDK details. If used in a formal security platform, it is best to cross-check results against other data sources such as crt.sh, SecurityTrails, VirusTotal, Censys, Shodan, or Subfinder.

Access from China

The page indicates that it is deployed on Cloudflare Workers, but does not provide any information about access from mainland China, mirrors, or network availability. As a result, its accessibility from China should be considered unknown. Domestic teams should test connectivity, latency, and stability before use. If access proves unstable, they may consider building their own open-source subdomain collection pipeline or using alternative data sources that are accessible from within China.