diff --git a/capabilities/web-security/capability.yaml b/capabilities/web-security/capability.yaml
index aed0448..f0d7149 100644
--- a/capabilities/web-security/capability.yaml
+++ b/capabilities/web-security/capability.yaml
@@ -75,6 +75,8 @@ checks:
     command: command -v caido-cli
   - name: burp
     command: test -f /opt/burp/burpsuite.jar
+  - name: waymore
+    command: command -v waymore
   - name: jxscout
     command: command -v jxscout-pro-v2
 
diff --git a/capabilities/web-security/scripts/install_tools.sh b/capabilities/web-security/scripts/install_tools.sh
index 6978ed7..a8f6502 100755
--- a/capabilities/web-security/scripts/install_tools.sh
+++ b/capabilities/web-security/scripts/install_tools.sh
@@ -104,6 +104,9 @@ fi
 npm install -g agent-browser
 agent-browser install || true
 
+# -- waymore (Wayback Machine recon) -----------------------------------------
+pip install --break-system-packages waymore
+
 # -- Clean up Go build cache -----------------------------------------------
 go clean -cache -modcache 2>/dev/null || true