Continuous Threat Exposure Management Maturity Model (CTEMMM)
NSAuditor AI Community — open-source network security scanner. 27 discovery plugins, structured findings, SARIF/CSV output, MCP integration, optional local or cloud AI analysis. No telemetry; scan data never leaves your machine for Nsasoft. MIT licensed.
Open-source Continuous Threat Exposure Management (CTEM) platform: asset discovery, attack surface management, risk-based prioritization, validation and remediation in one place. Go API + Next.js web UI.
Adds Tenable's CVE intelligence to third-party findings ingested into Tenable One. Enriches third-party CVE findings with Tenable plugin intel and on-demand AI explanations.
🕵️ Purely passive OSINT/EASM/CTEM platform — 15+ data sources, zero-touch asset discovery, risk detection
Bug bounty reconnaissance pipeline — 25+ tools, CVSS 3.1, HackerOne/Bugcrowd submission
MCP server for CVEasy AI — connect Claude Desktop & Claude Code to your live CVEasy install. Thin client over the CVEasy REST API.
OpenCTEM Sensor: lightweight scanner runtime that runs Nuclei, Trivy, Semgrep, Betterleaks and recon tools close to your assets and reports results to the OpenCTEM platform.
The CVEasy open lab — runnable security harnesses, red-team probes, and experiments. Good-faith open source from CVEasy AI.
CTEM scanner over nmap: asset identity + exploitability (OSV/NVD/EPSS/KEV) + nuclei verification + detection-gap analysis
Documentation for OpenCTEM: getting started, deployment, operations, architecture and integration guides. Published at docs.openctem.io.
An Enterprise-Grade Attack Surface Management (ASM) & Open-Source Intelligence (OSINT) engine. Features autonomous dark web telemetry, automated Nuclei vulnerability scanning, real-time SEC financial risk scoring, and AI-driven executive reporting.
CVEasy threat intel payloads. Quarterly free drops. MIT licensed.
Go SDK for OpenCTEM: API client, sensor runtime kit and ready-made scanner integrations (Nuclei, Trivy, Semgrep, CodeQL, subfinder, httpx, naabu, katana) with an SSRF-safe HTTP layer.
Synthetic vulnerability exposure management portfolio covering asset inventory, vulnerability risk scoring, patch SLA tracking, stale assets, EDR coverage, exceptions, remediation dashboards, and control mapping.
RISKX - Research-first enterprise cyber-risk CLI: attack-surface discovery, vulnerability intelligence and risk prioritization. Evidence-backed, no guessing, offline-capable.
Custom OpenCTI connectors and DefectDojo integration scripts for asset-aware CVE prioritization (EPSS, CISA KEV, MITRE ATT&CK, CPE)
Vulnerability Management - AI - CTEM
KEV + EPSS enrichment and vendor-centric vulnerability triage utility for CTEM and vulnerability prioritization.
To associate your repository with the ctem topic, visit your repo's landing page and select "manage topics."