attack-surface-management

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

go kubernetes github-api bigquery aws data google sql etl azure gcp data-engineering data-analysis data-integration data-collection elt etl-framework cspm airbyte attack-surface-management

UpdatedFeb 20, 2026
Go

j3ssie /osmedeus

Sponsor

Star6.1k

A Modern Orchestration Engine for Security

go security osint workflow-engine hacking penetration-testing bug-bounty pentesting bugbounty workflows hacking-tool security-tools ai-agents reconnaissance attack-surface-management llm

UpdatedFeb 19, 2026
Go

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks

aws security-audit compliance aws-security security-tools devsecops security-engineering cloud-security asset-management multicloud aws-audit cloud-auditing security-monitoring cloud-compliance-reporting gcp-security security-hub aws-compliance saas-security attack-surface-management google-cloud-security

UpdatedFeb 9, 2026
Python

PhonePe /mantis

Star1k

Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

osint application-security pentesting recon bugbounty hacktoberfest security-tools product-security attack-surface-management caasm

UpdatedMar 21, 2025
Python

censys /censys-python

Star458

An easy-to-use and lightweight API wrapper for Censys APIs.

python search api censys pypi python3 hacktoberfest attack-surface-management

UpdatedFeb 20, 2026
Python

0xbug /biu

Star426

网络资产攻击面梳理

security biu easm attack-surface-management biu-asm

UpdatedJan 31, 2026

yyhuni /xingrin

Star414

src资产管理漏洞扫描平台，子域名爆破，端口扫描，站点发现，目录扫描，爬虫，漏洞扫描

security asm penetration-testing bug-bounty infosec recon vulnerability-scanners security-tools vulnerability-scanner penetration-testing-framework subdomain-enumeration easm penetration-testing-tools bug-bounty-recon bug-bounty-hunter bug-bounty-tools attack-surface-management security-tools-testing

UpdatedFeb 18, 2026
TypeScript

g0ldencybersec /EasyEASM

Star316

Zero-dollar attack surface management tool

golang blackhat defcon recon attack-surface-management

UpdatedApr 16, 2024
Go

someengineering /cloud-security-list

Star186

A list of cloud security tools and vendors.

aws security azure gcp siem cspm attack-surface-management cnapp dspm

UpdatedSep 6, 2024

e1abrador /sub.Monitor

Star171

Self-hosted passive subdomain continous monitoring tool.

python security python3 bug-bounty infosec bugbounty monitoring-tool subdomain-scanner subdomain-enumeration bugbountytips red-team-tools bugbounty-tools attack-surface-management

UpdatedJan 30, 2024
Python

red-kite-solutions /stalker

Star89

Red Kite, the Extensible Attack Surface Management tool.

security bug-bounty security-automation security-tools easm attack-surface-management xasm

UpdatedFeb 8, 2026
TypeScript

r57-labs /chaos

Star69

Origin IP scanning utility developed with ChatGPT

python security scanner python3 enumeration penetration-testing bug-bounty recon bugbounty pentest information-gathering reconnaissance attack-surface-management chatgpt origin-ip

UpdatedJun 21, 2023
Python

oasm-platform /open-asm

Star62

Open-source platform for cybersecurity Attack Surface Management (OASM).

hacking cybersecurity recon pentest ai-agents pentest-tool secutiry easm attack-surface-management oasm open-asm

UpdatedFeb 19, 2026
TypeScript

aryanguenthner /365

Star56

BlueTeam, RedTeam, Bug bounty, CTI, OSINT, Threat Hunting, Network and Web Recon, Discovery, Enumeration, Vulnerability Mapping, Exploitation, Reporting, Darkweb, Deepweb, Research

cybersecurity penetration-testing red-team reconnaissance blue-team pentesting-tools attack-surface-management