OASM is a self-hostable, open-source Attack Surface Management platform. It inventories internet-facing assets, runs distributed scans through pluggable connectors, and tracks the resulting vulnerabilities in one workspace, with AI Studio — a security agent that works directly on that data. Security teams stop stitching together spreadsheets, one-off scanners, and hosted-only tools.

📖 Documentation → docs.oasm.io

Table of Contents

• Overview
• Key Features
• AI Studio
• Architecture
• Connectors
• Integrations
• Screenshots
• Quick Start
• Development
• Contributing
• Security
• Community and Resources
• License

Overview

External attack surface grows faster than teams can track: forgotten subdomains, exposed ports, outdated frameworks, leaked URLs, misconfigured cloud assets. Point scanners answer one question at a time; hosted ASM tools answer them but keep your asset data on someone else’s infrastructure.

Attack Surface Management…