Open-source platform for cybersecurity Attack Surface Management. Built to help security teams identify, monitor, and manage external assets and potential security exposures across their digital infrastructure.Documentation Index
Fetch the complete documentation index at: https://docs.oasm.dev/llms.txt
Use this file to discover all available pages before exploring further.
Features
- Asset Discovery & Management: Discover and manage internet-facing assets (domains, IPs, services) with grouping and multi-workspace support.
- Vulnerability Assessment: Scan for vulnerabilities and misconfigurations with issue tracking, risk analysis, and remediation guidance.
- Technology Detection: Identify technologies and services running on discovered assets.
- Distributed Scanning Engine: High-performance distributed workers that can be easily scaled for parallel scanning tasks.
- Tool Integration: Extensible framework for integrating security scanning tools.
- AI Assistant Integration: MCP server integration for AI assistants to query asset data via natural language.
- Workflow Automation: Automated scanning schedules, alerts, and remediation workflows.
- Real-time Monitoring: Monitor asset changes with instant notifications and a statistics dashboard.
- Search & Analytics: Search and filter asset data with analytics for risk trends and reporting.
Quickstart
Run OASM with docker localy in minutes.