Comparison to Other Tools
BBOT does a lot more than just subdomain enumeration. However, subdomain enumeration is arguably the most important part of OSINT, and since there's so many subdomain enumeration tools out there, they're the easiest class of tool to compare it to.
Thanks to BBOT's recursive nature (and its
massdns module with its NLP-powered subdomain mutations), it typically finds about 20-25% more than other tools such as
theHarvester. This holds true even for larger targets like
delta.com (1000+ subdomains):
Runtimes (Lower is Better)
For a detailed analysis of this data, please see Subdomain Enumeration Tool Face-Off