ctem

NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.

Adds Tenable's CVE intelligence to third-party findings ingested into Tenable One. Enriches third-party CVE findings with Tenable plugin intel and on-demand AI explanations.

🕵️ Purely passive OSINT/EASM/CTEM platform — 15+ data sources, zero-touch asset discovery, risk detection

Bug bounty reconnaissance pipeline — 25+ tools, CVSS 3.1, HackerOne/Bugcrowd submission

MCP server for CVEasy AI — connect Claude Desktop & Claude Code to your live CVEasy install. Thin client over the CVEasy REST API.

CTEM scanner over nmap: asset identity + exploitability (OSV/NVD/EPSS/KEV) + nuclei verification + detection-gap analysis

Network Access Control (NAC) + Security Information and Event Management (SIEM) + Continuous Threat Exposure Management (CTEM)

CVEasy threat intel payloads. Quarterly free drops. MIT licensed.

The CVEasy open lab — runnable security harnesses, red-team probes, and experiments. Good-faith open source from CVEasy AI.

An Enterprise-Grade Attack Surface Management (ASM) & Open-Source Intelligence (OSINT) engine. Features autonomous dark web telemetry, automated Nuclei vulnerability scanning, real-time SEC financial risk scoring, and AI-driven executive reporting.

RISKX - Research-first enterprise cyber-risk CLI: attack-surface discovery, vulnerability intelligence and risk prioritization. Evidence-backed, no guessing, offline-capable.

Synthetic vulnerability exposure management portfolio covering asset inventory, vulnerability risk scoring, patch SLA tracking, stale assets, EDR coverage, exceptions, remediation dashboards, and control mapping.

Prove authorized exposures with evidence. Apache-2.0 Community validation slice. Fixed only after a retest.

KEV + EPSS enrichment and vendor-centric vulnerability triage utility for CTEM and vulnerability prioritization.

Open-source continuous threat exposure management (CTEM) platform

Python utilities for wurtzite crystallo geometry, Schmid calcs, stereographic analysis... +Compression test data analysis

Cogent — independent third-party profile of a public API surface, by API Evangelist. Cogent Security is an AI-driven vulnerability management platform whose AI agents discover, assess, remediate, and report on software vulnerabilities at machine speed, before attackers can exploit them.

Simulation of elastic scattering in electron microscopy using the multislice algorithm. Simulations include various STEM and TEM techniques such as ADFSTEM, BFSTEM, ABFSTEM and CoM.

Zafran Security — independent third-party profile of a public API surface, by API Evangelist. Zafran Security is an AI-native threat exposure management (CTEM) platform for security teams buried in vulnerabilities and manual remediation work. It brings vulnerability findings together across an organization's existing scanners and tools to create a

Continuous threat exposure management engine that maps attack surface as a graph — Go, NATS JetStream, Neo4j