OASM

Open-source Attack Surface Management platform with distributed scanning and AI-driven analytics.

PlatformWebfree

OASM is an open-source, self-hosted Attack Surface Management platform. It continuously discovers and monitors internet-facing assets, runs distributed scanning workers built on tools like nuclei and subfinder, tracks vulnerabilities with remediation guidance, and sends real-time alerts to Slack, Telegram, or webhooks. It also exposes an MCP server so AI assistants can query asset data, and is aimed at security teams managing their organization's exposure.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of OASM - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim OASM to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether OASM (or something else) actually fits.

Try a problem