Open-source Attack Surface Management. Discover assets. Identify exposure. Own your security data.
☆277Nov 12, 2026Updated this week
Alternatives and similar repositories for open-asm
Users that are interested in open-asm are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Self-hosted external attack surface scanner. See what attackers see: subdomains, takeovers, open ports, CVEs ranked by EPSS/KEV, TLS/SSH/…☆35Updated this week
- Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerab…☆61Nov 1, 2026Updated last week
- Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestratio…☆672Sep 21, 2026Updated last month
- Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.☆480Oct 9, 2024Updated 2 years ago
- An enterprise-grade, agentless, and open-source cloud security platform for AWS, GCP, and Azure that combines CSPM, DSPM, CIEM, ASM, and …☆19May 10, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Zero-dollar attack surface management tool☆336Apr 16, 2024Updated 2 years ago
- Active Directory DACL collector and interactive graph viewer☆44Updated this week
- Public sync with private repo azure-aks-docs-pr☆16Updated this week
- Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision☆1,148Oct 25, 2026Updated 2 weeks ago
- Offensive Security Tools☆21Jun 29, 2026Updated 4 months ago
- 企业暴露面收集与持续监控（ASM）自托管系统：多源采集、存活与指纹富化、风险线索与变更对照。支持 Linux/Docker 一键部署。☆50Sep 18, 2026Updated last month
- Aggregate domain reconnaissance API — DNS, WHOIS/RDAP, SSL, subdomains, and email security in one parallel call. Live at https://oti-labs…☆15Oct 5, 2026Updated last month
- A curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).☆45Jan 13, 2026Updated 9 months ago
- A talk about finding your own path to vulnerability research and your first CVE.☆17Apr 4, 2026Updated 7 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A Modern Orchestration Engine for Security☆6,651Updated this week
- AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerber…☆418Oct 17, 2026Updated 3 weeks ago
- Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sa…☆3,383Updated this week
- Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.☆1,329Updated this week
- Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.☆278Dec 18, 2025Updated 10 months ago
- A powerful and efficient Go-based tool for extracting archived URLs from the Wayback Machine with advanced filtering capabilities, rate l…☆13Nov 5, 2025Updated last year
- Red Team Assessment Platform - reporting, visualizations, and analytics for cybersecurity red teams☆33Apr 13, 2026Updated 6 months ago
- SpicyAD is a C# Active Directory penetration testing tool designed for authorized security assessments. It combines multiple AD attack te…☆112Sep 9, 2026Updated 2 months ago
- ScopeSentry tool scans the source code☆257Jun 10, 2026Updated 5 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- The swiss army knife of LSASS dumping☆14Jan 4, 2026Updated 10 months ago
- Run Kali on "container" runtime.☆12Dec 10, 2025Updated 11 months ago
- Runtime vulnerability scanner: finds CVEs in the services actually running on a host and ranks them by network exposure.☆66Nov 5, 2026Updated last week
- Security monitoring middleware for IChatClient (Microsoft.Extensions.AI). 55 detectors for prompt injection, hallucination, PII leakage, …☆16Updated this week
- ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distribute…☆2,365Oct 11, 2026Updated last month
- reNgine-ng is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process vi…☆186May 12, 2026Updated 6 months ago
- ☆95Aug 5, 2026Updated 3 months ago
- The open-source AI security harness. Includes a web interface for code analysis, pentesting, vulnerability research, reverse engineering,…☆1,301Updated this week
- reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via E…☆8,936Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆38Feb 9, 2024Updated 2 years ago
- a strictly RFC 4510 conforming LDAP V3 pure Python client. The same codebase works with Python 2. Python 3, PyPy and PyPy3☆10Apr 19, 2025Updated last year
- A simple Telegram client writing chat messages to an Elasticsearch instance in realtime☆20Oct 9, 2026Updated last month
- Popular Rockyou password list in WPA2 8+ character minimum format, broken down into 10MB chunks for easier processing on resource limited…☆11Apr 9, 2024Updated 2 years ago
- ☆44Aug 26, 2023Updated 3 years ago
- Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian☆379Updated this week
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆8,363Nov 2, 2026Updated last week
Are these results useful?