# What does Metasploit use?

Metasploit (metasploit.com) shows public evidence of 14 tools, according to runsonwhat (last checked 2026-10-20).

- Industry: Computer & Network Security
- Size: 1–10 employees
- Based in: Austin, United States
- Founded: 2003
- LinkedIn: https://www.linkedin.com/company/the-metasploit-project

## Edge & Hosting

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Amazon Web Services](https://www.runsonwhat.com/reverse/aws) | Hosting & Cloud | Custom domain, Website code |  |
| [Amazon Route 53](https://www.runsonwhat.com/reverse/route53) | DNS | DNS records |  |
| [Amazon CloudFront](https://www.runsonwhat.com/reverse/cloudfront) | CDN & Edge | Website code |  |
| [GitHub Pages](https://www.runsonwhat.com/reverse/github-pages) | Hosting & Cloud | Custom domain |  |

## Application

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [jQuery](https://www.runsonwhat.com/reverse/jquery) | Frontend | Website code |  |
| [Google Fonts](https://www.runsonwhat.com/reverse/google-fonts) | Media & UI | Website code |  |
| [YouTube](https://www.runsonwhat.com/reverse/youtube) | Media & UI | Website code |  |

## Data & Observability

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Google Analytics](https://www.runsonwhat.com/reverse/ga) | Analytics | Website code |  |

## Go-to-market

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Google Ads](https://www.runsonwhat.com/reverse/google-ads) | Ads & Pixels | Website code |  |

## Company Ops

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Microsoft 365](https://www.runsonwhat.com/reverse/microsoft-365) | Workspace | DNS verification records, Email records |  |
| [Google Workspace](https://www.runsonwhat.com/reverse/google-workspace) | Workspace | Email records, Website code |  |
| [Valimail](https://www.runsonwhat.com/reverse/valimail) | Security & Compliance | Email records |  |
| [Box](https://www.runsonwhat.com/reverse/box) | Collaboration | DNS verification records |  |

## FAQ

### What tools does Metasploit use?

As of October 2026, runsonwhat has found 14 tools at Metasploit (metasploit.com) in public records. Edge & Hosting: Amazon Web Services, Amazon Route 53 and Amazon CloudFront. Application: jQuery, Google Fonts and YouTube. Data & Observability: Google Analytics. Go-to-market: Google Ads. Company Ops: Microsoft 365, Google Workspace and Valimail. Last checked October 20, 2026.

### What cloud does Metasploit run on?

Metasploit uses Amazon Web Services for hosting and cloud infrastructure, alongside GitHub Pages, according to runsonwhat (October 2026). runsonwhat found Amazon Web Services through a subdomain that points at Amazon Web Services and code on metasploit.com. Amazon Web Services is used by 146,166 companies runsonwhat tracks.

### What email provider does Metasploit use?

Metasploit uses Microsoft 365 for email and office software, alongside Google Workspace, according to runsonwhat (October 2026). runsonwhat found Microsoft 365 through a DNS verification record for Microsoft 365 and email records. Microsoft 365 is used by 715,482 companies runsonwhat tracks.

### What analytics tools does Metasploit use?

Metasploit uses Google Analytics for analytics, according to runsonwhat (October 2026). runsonwhat found Google Analytics through Google Analytics code on metasploit.com. Google Analytics is used by 895,313 companies runsonwhat tracks.

### Does Metasploit use jQuery?

Yes. runsonwhat found jQuery at Metasploit through jQuery code on metasploit.com. jQuery is a Frontend tool used by 923,684 companies runsonwhat tracks.

### How does runsonwhat know what Metasploit uses?

runsonwhat reads public records only. Of the 14 tools at Metasploit, 6 were found through code on metasploit.com, 4 through DNS records, 2 through email records and 2 through subdomains that point at the vendor. A tool is listed only when a direct record backs it up; DNS is rechecked weekly and metasploit.com about monthly.


---

Source: runsonwhat, https://www.runsonwhat.com/company/metasploit.com (updated October 2026). Counts are companies with direct public evidence of the tool (DNS records, certificates, website code, a real-browser crawl, subprocessor lists), so they are lower bounds. Methodology: https://www.runsonwhat.com/methodology.