Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
-
Updated
Oct 27, 2026 - Shell
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
The recursive internet scanner for hackers. 🧡
A Modern Orchestration Engine for Security
Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.
一款证据驱动的 FOFA 资产测绘智能体:支持自然语言侦察、AI 反思、CLI / MCP / Skill / REST API,以及经人工审批的 Nuclei 扫描。
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
Offensive security platform that automates attack surface discovery and vulnerability management
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
Modern attack-surface reconnaissance & asset monitoring platform — rebuilt from classic ARL with async decoupled scheduling, enterprise asset correlation and native MCP support. Docker-ready.
An easy-to-use and lightweight API wrapper for Censys APIs.
Zero-dollar attack surface management tool
Open-source Attack Surface Management. Discover assets. Identify exposure. Own your security data.
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
Self-hosted passive subdomain continous monitoring tool.
☠️ Advanced autonomous penetration testing framework. Automates web, network, and cloud vulnerability scanning with contextual CVSS scoring, AI-driven attack planning, and compliance reporting.
Red Kite, the Extensible Attack Surface Management tool.
To associate your repository with the attack-surface-management topic, visit your repo's landing page and select "manage topics."