oasm-platform / open-asm
Open-source Attack Surface Management. Discover assets. Identify exposure. Own your security data.
Why this job: topics: security, pentest, cybersecurity
What it does
OASM is a self-hostable, open-source Attack Surface Management platform. It inventories internet-facing assets, runs distributed scans through pluggable connectors, and tracks the resulting vulnerabilities in one workspace, with AI Studio — a security agent that works directly on that data. Security teams stop stitching together spreadsheets, one-off scanners, and hosted-only tools.
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit today
- Stars
- 272
- +4 this week
- Licence
- GPL-3.0
- Share-alike terms
- Downloads for
- 3 systems
- Mac, Windows, Linux
- Latest version
- v0.12.1
- Released today
- Built with
- TypeScript
- 91% of the code
Is it looked after?
- Contributors
- 5
- Last 90 days
- Issues
- 94% closed
- 7 still open
- Pull requests
- 558 merged
- 17 waiting
- Releases
- 44
- 30+ in the last year
- Contributing guide (opens in new tab)
- Security policy (opens in new tab)
- No code of conduct
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| hevnsnt / CVEngine | 697 | 3 days ago | GPL-3.0 | No downloads |
| BitterSecurity / Decepticon | 6,568 | 2 days ago | Apache-2.0 | Mac, Windows, Linux |
| j3ssie / osmedeus | 6,645 | 3 days ago | MIT | Mac, Linux |
More: download files, languages, topics and project record
Download files, v0.12.1
- Mac2 files, 2 downloads
- Windows1 file, 1 downloads
- Linux2 files, 8 downloads
Languages
- TypeScript 91%
- Go 8%
- JavaScript <1%
- Shell <1%
Topics
- attack-surface-management
- cybersecurity
- easm
- oasm
- open-asm
- pentest
- pentest-tool
- recon
- ai-agents
- security
Project record
- JobAI security
- StatusListed
- Commits1,128
- Forks50
- Watching5
- Stars in 28 days+48
- CreatedJun 16, 2025
- First seen by usNov 7, 2026
- CheckedNov 9, 2026